Skip to content
OpenAdvisories
Unscored CVE-2015-1931 EUVD-2015-2036GHSA-43cg-c28c-82hq

IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before SR3 FP10, 7 before SR9 FP10, 6 R1 before SR…

Published Jan 23, 2020 · Updated Aug 6, 2024 · Assigned by ibm

Description

IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before SR3 FP10, 7 before SR9 FP10, 6 R1 before SR8 FP7, 6 before SR16 FP7, and 5.0 before SR16 FP13 stores plaintext information in memory dumps, which allows local users to obtain sensitive information by reading a file.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 7 java-1.7.1-ibm +5 1:1.7.1.3.10-1jpp.1.el7_1 RHSA-2015:1485
RHEL 6 java-1.5.0-ibm +6 1:1.5.0.16.13-1jpp.3.el6_7 RHSA-2015:1544
RHEL 6 java-1.6.0-ibm +6 1:1.6.0.16.7-1jpp.1.el6_7 RHSA-2015:1486
RHEL 6 java-1.7.1-ibm +5 1:1.7.1.3.10-1jpp.3.el6_7 RHSA-2015:1485
RHEL 5 java-1.5.0-ibm +7 1:1.5.0.16.13-1jpp.3.el5 RHSA-2015:1544
RHEL 5 java-1.6.0-ibm +7 1:1.6.0.16.7-1jpp.1.el5 RHSA-2015:1486
RHEL 5 java-1.7.0-ibm +5 1:1.7.0.9.10-1jpp.2.el5 RHSA-2015:1488
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Network Satellite 5 java-1.6.0-ibm +1 1:1.6.0.16.7-1jpp.1.el5 RHSA-2015:1604

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 12 java-1_6_0-ibm 1.6.0_sr16.7-22.2 SUSE-SU-2015:1345-1
SLES 12 java-1_7_1-ibm 1.7.1_sr3.10-14.1 SUSE-SU-2015:1331-1
SLES 11 SP4 java-1_7_1-ibm 1.7.1_sr3.10-3.1 SUSE-SU-2015:1329-1
SLES 11 SP3 java-1_6_0-ibm 1.6.0_sr16.7-10.1 SUSE-SU-2015:1509-1
SLES 11 SP3 java-1_7_0-ibm 1.7.0_sr9.10-9.1 SUSE-SU-2015:1375-1
SLES 11 SP2 java-1_6_0-ibm 1.6.0_sr16.7-10.1 SUSE-SU-2015:1509-1
SLES 11 SP2 java-1_7_0-ibm 1.7.0_sr9.10-9.1 SUSE-SU-2015:1375-1
SLES 11 SP1 java-1_6_0-ibm 1.6.0_sr16.7-10.1 SUSE-SU-2015:1509-1
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 12 java-1_7_1-ibm 1.7.1_sr3.10-14.1 SUSE-SU-2015:1331-1
SLES for SAP 11 SP4 java-1_7_1-ibm 1.7.1_sr3.10-3.1 SUSE-SU-2015:1329-1
SLES for SAP 11 SP3 java-1_6_0-ibm 1.6.0_sr16.7-10.1 SUSE-SU-2015:1509-1
SLES for SAP 11 SP3 java-1_7_0-ibm 1.7.0_sr9.10-9.1 SUSE-SU-2015:1375-1

Advisories 10

References