Skip to content
OpenAdvisories
Low RHSA-2015:0080 18 CVEs

Red Hat Security Advisory: java-1.8.0-oracle security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 6

ReleasePackageFixed in
Red Hat · Rhel Extras Oracle Java 6 rhel_extras_oracle_java:6 java-1.8.0-oracle 1:1.8.0.31-1jpp.1.el6
Red Hat · Rhel Extras Oracle Java 6 rhel_extras_oracle_java:6 java-1.8.0-oracle-devel 1:1.8.0.31-1jpp.1.el6
Red Hat · Rhel Extras Oracle Java 6 rhel_extras_oracle_java:6 java-1.8.0-oracle-javafx 1:1.8.0.31-1jpp.1.el6
Red Hat · Rhel Extras Oracle Java 6 rhel_extras_oracle_java:6 java-1.8.0-oracle-jdbc 1:1.8.0.31-1jpp.1.el6
Red Hat · Rhel Extras Oracle Java 6 rhel_extras_oracle_java:6 java-1.8.0-oracle-plugin 1:1.8.0.31-1jpp.1.el6
Red Hat · Rhel Extras Oracle Java 6 rhel_extras_oracle_java:6 java-1.8.0-oracle-src 1:1.8.0.31-1jpp.1.el6

Vulnerabilities 18

  • Low 3.4
    CVE-2014-3566 Public exploit EPSS 100%

    The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which ma…

    openssl openssl openjdk-7 wolfssl Debian Ubuntu
  • Unscored —
    CVE-2014-6549

    Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect confidentiality, integrity, and avai…

  • Unscored —
    CVE-2014-6585

    Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidential…

    openjdk-7 openjdk-6 icu icu Debian Ubuntu
  • Unscored —
    CVE-2014-6587

    Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows local users to affect confidentiality, integrit…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6591

    Unspecified vulnerability in the Java SE component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attacke…

    openjdk-7 openjdk-6 icu icu Debian Ubuntu
  • Unscored —
    CVE-2014-6593 Public exploit EPSS 66%

    Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit 27…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6601

    Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, int…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0383

    Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R2…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0395

    Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidential…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0403

    Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows local users to affect confidentiality, integrit…

  • Unscored —
    CVE-2015-0406

    Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality and …

  • Unscored —
    CVE-2015-0407

    Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidential…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0408

    Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidential…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0410

    Unspecified vulnerability in the Java SE, Java SE Embedded, JRockit component in Oracle Java SE 5.0u75, 6u85, 7u72, and…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0412

    Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, int…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0413

    Unspecified vulnerability in Oracle Java SE 7u72 and 8u25 allows local users to affect integrity via unknown vectors re…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2015-0421

    Unspecified vulnerability in Oracle Java SE 8u25 allows local users to affect confidentiality, integrity, and availabil…

  • Unscored —
    CVE-2015-0437

    Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect confidentiality, integrity, and avai…

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html#AppendixJAVA
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1152789#c82
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1123870
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1152789
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1183020
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1183021
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1183023
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1183031
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1183043
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1183044
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1183049
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1183645
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1183646
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1183660
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1183670
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1183715
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1184275
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1184276
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1184277
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1184278
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0080.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-3566
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3566
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3566
  • report
    https://access.redhat.com/security/cve/CVE-2014-6549
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-6549
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-6549
  • report
    https://access.redhat.com/security/cve/CVE-2014-6585
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-6585
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-6585
  • report
    https://access.redhat.com/security/cve/CVE-2014-6587
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-6587
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-6587
  • report
    https://access.redhat.com/security/cve/CVE-2014-6591
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-6591
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-6591
  • report
    https://access.redhat.com/security/cve/CVE-2014-6593
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-6593