Skip to content
OpenAdvisories
Unscored CVE-2014-3086 EUVD-2014-3107GHSA-69wm-fwm5-f2r8

Unspecified vulnerability in the IBM Java Virtual Machine, as used in IBM WebSphere Real Time 3 before Service Refresh 7 FP1 and other prod…

Published Aug 12, 2014 · Updated Aug 6, 2024 · Assigned by ibm

Description

Unspecified vulnerability in the IBM Java Virtual Machine, as used in IBM WebSphere Real Time 3 before Service Refresh 7 FP1 and other products, allows remote attackers to gain privileges by leveraging the ability to execute code in the context of a security manager.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
RHEL 7 java-1.7.1-ibm +5 1:1.7.1.1.1-1jpp.1.el7_0 RHSA-2014:1042
RHEL 6 java-1.5.0-ibm +6 1:1.5.0.16.7-1jpp.1.el6_5 RHSA-2014:1036
RHEL 6 java-1.6.0-ibm +6 1:1.6.0.16.1-1jpp.1.el6_5 RHSA-2014:1033
RHEL 6 java-1.7.0-ibm +5 1:1.7.0.7.1-1jpp.1.el6_5 RHSA-2014:1041
RHEL 5 java-1.5.0-ibm +7 1:1.5.0.16.7-1jpp.1.el5_10 RHSA-2014:1036
RHEL 5 java-1.6.0-ibm +7 1:1.6.0.16.1-1jpp.1.el5_10 RHSA-2014:1033
RHEL 5 java-1.7.0-ibm +5 1:1.7.0.7.1-1jpp.1.el5_10 RHSA-2014:1041
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Network Satellite 5 java-1.6.0-ibm +1 1:1.6.0.16.3-1jpp.1.el5 RHSA-2015:0264

Advisories 5

References