CVE-2015-0408 Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI.
HighCVSS 10.0
EPSS 6.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle jdk | = 1.5.0-update75 | No fix listed |
| oracle jdk | = 1.6.0-update85 | No fix listed |
| oracle jdk | = 1.7.0-update72 | No fix listed |
| oracle jdk | = 1.8.0-update25 | No fix listed |
| oracle jre | = 1.5.0-update75 | No fix listed |
| oracle jre | = 1.6.0-update85 | No fix listed |
| oracle jre | = 1.7.0-update72 | No fix listed |
| oracle jre | = 1.8.0-update25 | No fix listed |
| Canonical Ubuntu Linux | = 10.04 | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.10 | No fix listed |
| debian linux | = 7.0 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| novell suse linux enterprise desktop | = 11.0-sp3 | No fix listed |
| novell suse linux enterprise server | = 12.0 | No fix listed |
| opensuse | = 13.2 | No fix listed |
| redhat enterprise linux | = 5.0 | No fix listed |
| redhat enterprise linux | = 6.0 | No fix listed |
| redhat enterprise linux | = 7.0 | No fix listed |
References
- HPSBUX03281 vendor-advisory
- openSUSE-SU-2015:0190 vendor-advisory
- SUSE-SU-2015:0336 vendor-advisory
- SUSE-SU-2015:0503 vendor-advisory
- SSRT101951 vendor-advisory
- SSRT101968 vendor-advisory
- RHSA-2015:0068 vendor-advisory
- RHSA-2015:0079 vendor-advisory
- RHSA-2015:0080 vendor-advisory
- RHSA-2015:0085 vendor-advisory
- RHSA-2015:0086 vendor-advisory
- RHSA-2015:0136 vendor-advisory
- RHSA-2015:0264 vendor-advisory
- DSA-3144 vendor-advisory
- DSA-3147 vendor-advisory
- www.oracle.com
- 72140 vdb-entry
- 1031580 vdb-entry
- USN-2486-1 vendor-advisory
- USN-2487-1 vendor-advisory
- www.vmware.com
- oracle-cpujan2015-cve20150408(100142) vdb-entry
- GLSA-201507-14 vendor-advisory
- GLSA-201603-14 vendor-advisory
- www-304.ibm.com