Summary
It was discovered that rebinding of the receiver of a
DirectMethodHandle may allow a protected method to be accessed. Am
attacker could use this to expose sensitive information or possibly
execute arbitrary code.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | openjdk-7 | 7u91-2.6.3-0ubuntu0.14.04.1 |
Vulnerabilities 1
-
Unscored —
Unspecified vulnerability in Oracle Java SE 7u85 allows remote attackers to affect confidentiality and integrity via un…
References
-
report
https://ubuntu.com/security/CVE-2015-4871