Vulnerability Description
Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0432 and CVE-2014-0455.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Canonical | Ubuntu Linux | 12.10 |
| Oracle | Jdk | 1.7.0 |
| Oracle | Jre | 1.7.0 |
References
- http://marc.info/?l=bugtraq&m=140852886808946&w=2Issue TrackingMailing ListThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-0675.htmlThird Party Advisory
- http://security.gentoo.org/glsa/glsa-201502-12.xmlThird Party Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21672080Third Party Advisory
- http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.htmlVendor Advisory
- http://www.securityfocus.com/bid/66898Third Party AdvisoryVDB Entry
- http://www.ubuntu.com/usn/USN-2187-1Third Party Advisory
- https://access.redhat.com/errata/RHSA-2014:0413Third Party Advisory
- http://marc.info/?l=bugtraq&m=140852886808946&w=2Issue TrackingMailing ListThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-0675.htmlThird Party Advisory
- http://security.gentoo.org/glsa/glsa-201502-12.xmlThird Party Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21672080Third Party Advisory
- http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.htmlVendor Advisory
- http://www.securityfocus.com/bid/66898Third Party AdvisoryVDB Entry
- http://www.ubuntu.com/usn/USN-2187-1Third Party Advisory
FAQ
What is CVE-2014-2402?
CVE-2014-2402 is a vulnerability with a CVSS score of 7.5 (HIGH). Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Librari...
How severe is CVE-2014-2402?
CVE-2014-2402 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2014-2402?
Check the references section above for vendor advisories and patch information. Affected products include: Canonical Ubuntu Linux, Oracle Jdk, Oracle Jre.