Vulnerability Description
Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3, and R28.3.3 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Jrockit | r27.8.3 |
| Oracle | Jdk | 1.5.0 |
| Oracle | Jre | 1.5.0 |
References
- http://linux.oracle.com/errata/ELSA-2014-1633.html
- http://linux.oracle.com/errata/ELSA-2014-1634.html
- http://linux.oracle.com/errata/ELSA-2014-1636
- http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00013.html
- http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.html
- http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html
- http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00036.html
- http://marc.info/?l=bugtraq&m=141775382904016&w=2
- http://rhn.redhat.com/errata/RHSA-2014-1620.html
- http://rhn.redhat.com/errata/RHSA-2014-1633.html
- http://rhn.redhat.com/errata/RHSA-2014-1634.html
- http://rhn.redhat.com/errata/RHSA-2014-1636.html
FAQ
What is CVE-2014-6457?
CVE-2014-6457 is a vulnerability with a CVSS score of 4.0 (MEDIUM). Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3, and R28.3.3 allows remote attackers to affect confidentiality and integrity via ve...
How severe is CVE-2014-6457?
CVE-2014-6457 has been rated MEDIUM with a CVSS base score of 4.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2014-6457?
Check the references section above for vendor advisories and patch information. Affected products include: Oracle Jrockit, Oracle Jdk, Oracle Jre.