Skip to content
OpenAdvisories
Unscored USN-2187-1 24 CVEs

openjdk-7 vulnerabilities

Published Apr 30, 2014 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

Several vulnerabilities were discovered in the OpenJDK JRE related to
information disclosure, data integrity and availability. An attacker could
exploit these to cause a denial of service or expose sensitive data over
the network. (CVE-2014-0429, CVE-2014-0446, CVE-2014-0451, CVE-2014-0452,
CVE-2014-0454, CVE-2014-0455, CVE-2014-0456, CVE-2014-0457, CVE-2014-0458,
CVE-2014-0461, CVE-2014-2397, CVE-2014-2402, CVE-2014-2412, CVE-2014-2414,
CVE-2014-2421, CVE-2014-2423, CVE-2014-2427)

Two vulnerabilities were discovered in the OpenJDK JRE related to
information disclosure and data integrity. An attacker could exploit these
to expose sensitive data over the network. (CVE-2014-0453, CVE-2014-0460)

A vulnerability was discovered in the OpenJDK JRE related to availability.
An attacker could exploit this to cause a denial of service.
(CVE-2014-0459)

Jakub Wilk discovered that the OpenJDK JRE incorrectly handled temporary
files. A local attacker could possibly use this issue to overwrite
arbitrary files. In the default installation of Ubuntu, this should be
prevented by the Yama link restrictions. (CVE-2014-1876)

Two vulnerabilities were discovered in the OpenJDK JRE related to data
integrity. (CVE-2014-2398, CVE-2014-2413)

A vulnerability was discovered in the OpenJDK JRE related to information
disclosure. An attacker could exploit this to expose sensitive data over
the network. (CVE-2014-2403)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS openjdk-7 7u55-2.4.7-1ubuntu1

Vulnerabilities 24

  • Unscored —
    CVE-2014-0429

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedde…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-0446

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attacke…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-0451

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attacke…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-0452

    Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to af…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-0453

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedde…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-0454

    Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect co…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-0455

    Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect co…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-0456

    Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to af…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-0457

    Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embe…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-0458

    Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to af…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-0459

    Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect av…

    openjdk-7 lcms2 lcms2 Debian Ubuntu
  • Unscored —
    CVE-2014-0460

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedde…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-0461

    Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to af…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-1876

    The unpacker::redirect_stdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8; Oracle Java SE 5.0u61, 6u71, 7…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-2397

    Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect co…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-2398

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and JRockit R27.8.1 and R28.3.1 a…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-2402

    Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect co…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-2403

    Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to af…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-2412

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, SE 7u51, and 8, and Java SE Embedded 7u51, allows remote atta…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-2413

    Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect in…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-2414

    Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to af…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-2421

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows …

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-2423

    Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to af…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-2427

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attacke…

    openjdk-7 Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2014-0429
  • report
    https://ubuntu.com/security/CVE-2014-0446
  • report
    https://ubuntu.com/security/CVE-2014-0451
  • report
    https://ubuntu.com/security/CVE-2014-0452
  • report
    https://ubuntu.com/security/CVE-2014-0453
  • report
    https://ubuntu.com/security/CVE-2014-0454
  • report
    https://ubuntu.com/security/CVE-2014-0455
  • report
    https://ubuntu.com/security/CVE-2014-0456
  • report
    https://ubuntu.com/security/CVE-2014-0457
  • report
    https://ubuntu.com/security/CVE-2014-0458
  • report
    https://ubuntu.com/security/CVE-2014-0459
  • report
    https://ubuntu.com/security/CVE-2014-0460
  • report
    https://ubuntu.com/security/CVE-2014-0461
  • report
    https://ubuntu.com/security/CVE-2014-1876
  • report
    https://ubuntu.com/security/CVE-2014-2397
  • report
    https://ubuntu.com/security/CVE-2014-2398
  • report
    https://ubuntu.com/security/CVE-2014-2402
  • report
    https://ubuntu.com/security/CVE-2014-2403
  • report
    https://ubuntu.com/security/CVE-2014-2412
  • report
    https://ubuntu.com/security/CVE-2014-2413
  • report
    https://ubuntu.com/security/CVE-2014-2414
  • report
    https://ubuntu.com/security/CVE-2014-2421
  • report
    https://ubuntu.com/security/CVE-2014-2423
  • report
    https://ubuntu.com/security/CVE-2014-2427
  • report
    https://launchpad.net/bugs/1283828