Vulnerability Description
Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and SE 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Hp | Hp-Ux | b.11.23 |
| Debian | Debian Linux | 7.0 |
| Oracle | Jdk | 1.7.0 |
| Oracle | Jre | 1.7.0 |
References
- http://marc.info/?l=bugtraq&m=140852886808946&w=2Third Party Advisory
- http://seclists.org/fulldisclosure/2014/Dec/23Mailing ListThird Party Advisory
- http://secunia.com/advisories/60129
- http://secunia.com/advisories/60485
- http://secunia.com/advisories/60812
- http://security.gentoo.org/glsa/glsa-201502-12.xmlThird Party Advisory
- http://www.debian.org/security/2014/dsa-2980Third Party Advisory
- http://www.debian.org/security/2014/dsa-2987Third Party Advisory
- http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.htmlVendor Advisory
- http://www.securityfocus.com/archive/1/534161/100/0/threaded
- http://www.securityfocus.com/bid/68645
- http://www.securitytracker.com/id/1030577
- http://www.vmware.com/security/advisories/VMSA-2014-0012.htmlThird Party Advisory
- https://access.redhat.com/errata/RHSA-2014:0902
- http://marc.info/?l=bugtraq&m=140852886808946&w=2Third Party Advisory
FAQ
What is CVE-2014-2490?
CVE-2014-2490 is a vulnerability with a CVSS score of 9.3 (HIGH). Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and SE 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotsp...
How severe is CVE-2014-2490?
CVE-2014-2490 has been rated HIGH with a CVSS base score of 9.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2014-2490?
Check the references section above for vendor advisories and patch information. Affected products include: Hp Hp-Ux, Debian Debian Linux, Oracle Jdk, Oracle Jre.