Vulnerability Description
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality via vectors related to JAXP.
CVSS Score
5.0
MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Canonical | Ubuntu Linux | 10.04 |
| Oracle | Jdk | 1.6.0 |
| Oracle | Jre | 1.6.0 |
| Debian | Debian Linux | 6.0 |
References
- http://marc.info/?l=bugtraq&m=140852886808946&w=2Issue TrackingMailing ListThird Party Advisory
- http://marc.info/?l=bugtraq&m=140852974709252&w=2Issue TrackingMailing ListThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-0675.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-0685.htmlThird Party Advisory
- http://secunia.com/advisories/58415Third Party Advisory
- http://security.gentoo.org/glsa/glsa-201406-32.xmlThird Party Advisory
- http://security.gentoo.org/glsa/glsa-201502-12.xmlThird Party Advisory
- http://www.debian.org/security/2014/dsa-2912Third Party Advisory
- http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.htmlVendor Advisory
- http://www.securityfocus.com/bid/66918Third Party AdvisoryVDB Entry
- http://www.ubuntu.com/usn/USN-2187-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-2191-1Third Party Advisory
- https://access.redhat.com/errata/RHSA-2014:0413Third Party Advisory
- https://access.redhat.com/errata/RHSA-2014:0414Third Party Advisory
- http://marc.info/?l=bugtraq&m=140852886808946&w=2Issue TrackingMailing ListThird Party Advisory
FAQ
What is CVE-2014-2403?
CVE-2014-2403 is a vulnerability with a CVSS score of 5.0 (MEDIUM). Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality via vectors related to JAXP.
How severe is CVE-2014-2403?
CVE-2014-2403 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2014-2403?
Check the references section above for vendor advisories and patch information. Affected products include: Canonical Ubuntu Linux, Oracle Jdk, Oracle Jre, Debian Debian Linux.