Skip to content
OpenAdvisories
Unscored CVE-2013-0424 EUVD-2013-0435GHSA-3w77-j752-v9mg

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 t…

Published Feb 2, 2013 · Updated Aug 6, 2024 · Assigned by oracle

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via vectors related to RMI. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to cross-site scripting (XSS) in the sun.rmi.transport.proxy CGIHandler class that does not properly handle error messages in a (1) command or (2) port number.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 6 java-1.5.0-ibm +6 1:1.5.0.16.0-1jpp.1.el6_4 RHSA-2013:0624
RHEL 6 java-1.6.0-ibm +6 1:1.6.0.13.0-1jpp.3.el6_4 RHSA-2013:0625
RHEL 6 java-1.6.0-openjdk +4 1:1.6.0.0-1.54.1.11.6.el6_3 RHSA-2013:0245
RHEL 6 java-1.6.0-sun +5 1:1.6.0.39-1jpp.1.el6_3 RHSA-2013:0236
RHEL 6 java-1.7.0-ibm +5 1:1.7.0.4.0-1jpp.2.el6_4 RHSA-2013:0626
RHEL 6 java-1.7.0-openjdk +4 1:1.7.0.9-2.3.5.3.el6_3 RHSA-2013:0247
RHEL 6 java-1.7.0-oracle +5 1:1.7.0.13-1jpp.3.el6_3 RHSA-2013:0237
RHEL 5 java-1.5.0-ibm +7 1:1.5.0.16.0-1jpp.1.el5_9 RHSA-2013:0624
RHEL 5 java-1.6.0-ibm +7 1:1.6.0.13.0-1jpp.2.el5_9 RHSA-2013:0625
RHEL 5 java-1.6.0-openjdk +4 1:1.6.0.0-1.33.1.11.6.el5_9 RHSA-2013:0246
RHEL 5 java-1.6.0-sun +5 1:1.6.0.39-1jpp.4.el5_9 RHSA-2013:0236
RHEL 5 java-1.7.0-ibm +5 1:1.7.0.4.0-1jpp.2.el5_9 RHSA-2013:0626
RHEL 5 java-1.7.0-openjdk +4 1:1.7.0.9-2.3.5.3.el5_9 RHSA-2013:0247
RHEL 5 java-1.7.0-oracle +5 1:1.7.0.13-1jpp.1.el5_9 RHSA-2013:0237
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Network Satellite 5 java-1.6.0-ibm +1 1:1.6.0.14.0-1jpp.1.el5_9 RHSA-2013:1456, RHSA-2013:1455

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed java-1_7_0-openjdk 1.7.0.121-1.1 openSUSE-SU-2024:10534-1

Advisories 11

References