Skip to content
OpenAdvisories
Unscored CVE-2014-4208 EUVD-2014-4137GHSA-xc8x-qr4j-5rjx

Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and 8u5 allows remote attackers to affect integrity via unknown v…

Published Jul 17, 2014 · Updated Aug 6, 2024 · Assigned by oracle

Description

Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and 8u5 allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2014-4220.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
RHEL 7 java-1.7.1-ibm +5 1:1.7.1.1.1-1jpp.1.el7_0 RHSA-2014:1042
RHEL 6 java-1.7.0-ibm +5 1:1.7.0.7.1-1jpp.1.el6_5 RHSA-2014:1041
RHEL 5 java-1.7.0-ibm +5 1:1.7.0.7.1-1jpp.1.el5_10 RHSA-2014:1041
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Rhel Extras Oracle Java 7 java-1.7.0-oracle +5 1:1.7.0.65-1jpp.1.el7 RHSA-2014:0902
Red Hat Rhel Extras Oracle Java 6 java-1.7.0-oracle +5 1:1.7.0.65-1jpp.1.el6_5 RHSA-2014:0902
Red Hat Rhel Extras Oracle Java 5 java-1.7.0-oracle +5 1:1.7.0.65-1jpp.2.el5_10 RHSA-2014:0902

Advisories 3

References