Skip to content
OpenAdvisories
Unscored Public exploit CVE-2013-5842 EUVD-2013-5677GHSA-vmv2-mj2q-xc6j

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u…

Published Oct 16, 2013 · Updated Aug 6, 2024 · Assigned by oracle

Description

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-5850.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 6 java-1.5.0-ibm +6 1:1.5.0.16.4-1jpp.1.el6_4 RHSA-2013:1509
RHEL 6 java-1.6.0-ibm +6 1:1.6.0.15.0-1jpp.1.el6_4 RHSA-2013:1508
RHEL 6 java-1.6.0-openjdk +4 1:1.6.0.0-1.65.1.11.14.el6_4 RHSA-2013:1505
RHEL 6 java-1.7.0-ibm +5 1:1.7.0.6.0-1jpp.1.el6_4 RHSA-2013:1507
RHEL 6 java-1.7.0-openjdk +4 1:1.7.0.45-2.4.3.2.el6_4 RHSA-2013:1451
RHEL 6 java-1.7.0-oracle +5 1:1.7.0.45-1jpp.2.el6_4 RHSA-2013:1440
RHEL 5 java-1.5.0-ibm +7 1:1.5.0.16.4-1jpp.1.el5_10 RHSA-2013:1509
RHEL 5 java-1.6.0-ibm +7 1:1.6.0.15.0-1jpp.1.el5_10 RHSA-2013:1508
RHEL 5 java-1.6.0-openjdk +4 1:1.6.0.0-1.42.1.11.14.el5_10 RHSA-2013:1505
RHEL 5 java-1.7.0-ibm +5 1:1.7.0.6.0-1jpp.1.el5_10 RHSA-2013:1507
RHEL 5 java-1.7.0-openjdk +4 1:1.7.0.45-2.4.3.1.el5_10 RHSA-2013:1447
RHEL 5 java-1.7.0-oracle +5 1:1.7.0.45-1jpp.1.el5_10 RHSA-2013:1440
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Rhel Extras Oracle Java 6 java-1.6.0-sun +5 1:1.6.0.75-1jpp.1.el6_5 RHSA-2014:0414
Red Hat Rhel Extras Oracle Java 5 java-1.6.0-sun +5 1:1.6.0.75-1jpp.3.el5_10 RHSA-2014:0414
Red Hat Network Satellite 5 java-1.6.0-ibm +1 1:1.6.0.15.0-1jpp.1.el5 RHSA-2013:1793

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed java-1_7_0-openjdk 1.7.0.121-1.1 openSUSE-SU-2024:10534-1

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Advisories 10

References