Description
Directory traversal vulnerability in the Java Archive Tool (Jar) utility in J2SE SDK 1.4.2 and 1.5, and OpenJDK, allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in filenames in a .jar file.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 14.04 LTS | openjdk-6 | 6b35-1.13.7-1ubuntu0.14.04.1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | java-1.6.0-openjdk +4 | 1:1.6.0.35-1.13.7.1.el7_1 | RHSA-2015:0808 |
| RHEL 7 | java-1.7.0-openjdk +6 | 1:1.7.0.79-2.5.5.1.ael7b_1 | RHSA-2015:0806 |
| RHEL 7 | java-1.7.1-ibm +5 | 1:1.7.1.3.0-1jpp.2.el7_1 | RHSA-2015:1020 |
| RHEL 7 | java-1.8.0-openjdk +6 | 1:1.8.0.45-30.b13.ael7b_1 | RHSA-2015:0809 |
| RHEL 6 | java-1.5.0-ibm +6 | 1:1.5.0.16.10-1jpp.1.el6_6 | RHSA-2015:1021 |
| RHEL 6 | java-1.6.0-ibm +6 | 1:1.6.0.16.4-1jpp.1.el6_6 | RHSA-2015:1006 |
| RHEL 6 | java-1.6.0-openjdk +4 | 1:1.6.0.35-1.13.7.1.el6_6 | RHSA-2015:0808 |
| RHEL 6 | java-1.7.0-openjdk +4 | 1:1.7.0.79-2.5.5.1.el6_6 | RHSA-2015:0806 |
| RHEL 6 | java-1.7.1-ibm +5 | 1:1.7.1.3.0-1jpp.2.el6_6 | RHSA-2015:1020 |
| RHEL 6 | java-1.8.0-openjdk +5 | 1:1.8.0.45-28.b13.el6_6 | RHSA-2015:0809 |
| RHEL 5 | java-1.5.0-ibm +7 | 1:1.5.0.16.10-1jpp.1.el5 | RHSA-2015:1021 |
| RHEL 5 | java-1.6.0-ibm +7 | 1:1.6.0.16.4-1jpp.1.el5 | RHSA-2015:1006 |
| RHEL 5 | java-1.6.0-openjdk +4 | 1:1.6.0.35-1.13.7.1.el5_11 | RHSA-2015:0808 |
| RHEL 5 | java-1.7.0-ibm +5 | 1:1.7.0.9.0-1jpp.1.el5 | RHSA-2015:1007 |
| RHEL 5 | java-1.7.0-openjdk +4 | 1:1.7.0.79-2.5.5.2.el5_11 | RHSA-2015:0807 |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Extras Oracle Java 7 | java-1.6.0-sun +5 | 1:1.6.0.95-1jpp.3.el7_1 | RHSA-2015:0858 |
| Red Hat Rhel Extras Oracle Java 7 | java-1.7.0-oracle +5 | 1:1.7.0.79-1jpp.1.el7_1 | RHSA-2015:0857 |
| Red Hat Rhel Extras Oracle Java 7 | java-1.8.0-oracle +5 | 1:1.8.0.45-1jpp.2.el7_1 | RHSA-2015:0854 |
| Red Hat Rhel Extras Oracle Java 6 | java-1.6.0-sun +5 | 1:1.6.0.95-1jpp.3.el6_6 | RHSA-2015:0858 |
| Red Hat Rhel Extras Oracle Java 6 | java-1.7.0-oracle +5 | 1:1.7.0.79-1jpp.1.el6_6 | RHSA-2015:0857 |
| Red Hat Rhel Extras Oracle Java 6 | java-1.8.0-oracle +5 | 1:1.8.0.45-1jpp.2.el6_6 | RHSA-2015:0854 |
| Red Hat Rhel Extras Oracle Java 5 | java-1.6.0-sun +5 | 1:1.6.0.95-1jpp.3.el5_11 | RHSA-2015:0858 |
| Red Hat Rhel Extras Oracle Java 5 | java-1.7.0-oracle +5 | 1:1.7.0.79-1jpp.1.el5_11 | RHSA-2015:0857 |
| Red Hat Network Satellite 5 | java-1.6.0-ibm +1 | 1:1.6.0.16.4-1jpp.1.el5 | RHSA-2015:1091 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | java-1.6.0-openjdk +4 | 1:1.6.0.35-1.13.7.1.0.1.el5_11 | ELSA-2015-0808 |
| Oracle Linux 7 | java-1.7.0-openjdk +6 | 1:1.7.0.79-2.5.5.1.0.1.el7_1 | ELSA-2015-0806 |
| Oracle Linux 7 | java-1.8.0-openjdk +6 | 1:1.8.0.45-30.b13.el7_1 | ELSA-2015-0809 |
Advisories 15
- RHSA-2015:1091 Red Hat Security Advisory: Red Hat Satellite IBM Java Runtime security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:1020 Red Hat Security Advisory: java-1.7.1-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:1021 Red Hat Security Advisory: java-1.5.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:1007 Red Hat Security Advisory: java-1.7.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:1006 Red Hat Security Advisory: java-1.6.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:0857 Red Hat Security Advisory: java-1.7.0-oracle security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:0858 Red Hat Security Advisory: java-1.6.0-sun security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:0854 Red Hat Security Advisory: java-1.8.0-oracle security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:0809 Red Hat Security Advisory: java-1.8.0-openjdk security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:0807 Red Hat Security Advisory: java-1.7.0-openjdk security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:0808 Red Hat Security Advisory: java-1.6.0-openjdk security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:0806 Red Hat Security Advisory: java-1.7.0-openjdk security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- ELSA-2015-0806 Critical: java-1.7.0-openjdk security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Apr 15, 2015
- ELSA-2015-0809 Important: java-1.8.0-openjdk security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Apr 15, 2015
- ELSA-2015-0808 Important: java-1.6.0-openjdk security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Apr 15, 2015
References
- RHSA-2015:0857 vendor-advisory
- RHSA-2015:1007 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=594497
- RHSA-2015:0806 vendor-advisory
- RHSA-2015:1006 vendor-advisory
- [oss-security] 20100608 jar, fastjar directory traversal vulnerabilities mailing-list
- https://bugzilla.redhat.com/show_bug.cgi?id=601823
- http://advisories.mageia.org/MGASA-2015-0158.html
- MDVSA-2015:212 vendor-advisory
- 20050412 7a69Adv#23 - Jar tool directory transversal vulnerability mailing-list
- RHSA-2015:1091 vendor-advisory
- [oss-security] 20100608 Re: jar, fastjar directory traversal vulnerabilities mailing-list
- 14902 third-party-advisory
- RHSA-2015:1020 vendor-advisory
- RHSA-2015:0807 vendor-advisory
- RHSA-2015:0858 vendor-advisory
- RHSA-2015:1021 vendor-advisory
- RHSA-2015:0808 vendor-advisory
- RHSA-2015:0809 vendor-advisory
- 13083 vdb-entry
- RHSA-2015:0854 vendor-advisory
- http://www.securiteam.com/securitynews/5IP0C0AFGW.html