CVE-2014-6457)Several vulnerabilities were discovered in the OpenJDK JRE related to dataintegrity. (CVE-2014-6502, CVE-2014-6512, CVE-2014-6519, CVE-2014-6527,CVE-2014-6558)Several vulnerabilities were discovered in the OpenJDK JRE related toinformation disclosure. An attacker could exploit these to expose sensitivedata over the network. (CVE-2014-6504, CVE-2014-6511, CVE-2014-6517,CVE-2014-6531)Two vulnerabilities were discovered in the OpenJDK JRE related toinformation disclosure, data integrity and availability. An attacker couldexploit these to cause a denial of service or expose sensitive data overthe network. (CVE-2014-6506, CVE-2014-6513)"> OVAL Reference oval:org.mitre.oval:def:27170 - CERT Civis.Net
Oval Definition:oval:org.mitre.oval:def:27170
Revision Date:2014-12-08Version:3
Title:USN-2388-1 -- OpenJDK 7 vulnerabilities
Description:A vulnerability was discovered in the OpenJDK JRE related to informationdisclosure and data integrity. An attacker could exploit this to exposesensitive data over the network. (CVE-2014-6457)Several vulnerabilities were discovered in the OpenJDK JRE related to dataintegrity. (CVE-2014-6502, CVE-2014-6512, CVE-2014-6519, CVE-2014-6527,CVE-2014-6558)Several vulnerabilities were discovered in the OpenJDK JRE related toinformation disclosure. An attacker could exploit these to expose sensitivedata over the network. (CVE-2014-6504, CVE-2014-6511, CVE-2014-6517,CVE-2014-6531)Two vulnerabilities were discovered in the OpenJDK JRE related toinformation disclosure, data integrity and availability. An attacker couldexploit these to cause a denial of service or expose sensitive data overthe network. (CVE-2014-6506, CVE-2014-6513)
Family:unixClass:patch
Status:ACCEPTEDReference(s):CVE-2014-6457
CVE-2014-6502
CVE-2014-6504
CVE-2014-6506
CVE-2014-6511
CVE-2014-6512
CVE-2014-6513
CVE-2014-6517
CVE-2014-6519
CVE-2014-6527
CVE-2014-6531
CVE-2014-6558
USN-2388-1
Platform(s):Ubuntu 14.04
Product(s):openjdk-7
Definition Synopsis
  • Ubuntu 14.04 is installed
  • AND Packages match section
  • openjdk-7-jre-lib is earlier than 0:7u71-2.5.3-0ubuntu0.14.04.1
  • OR openjdk-7-jre-zero is earlier than 0:7u71-2.5.3-0ubuntu0.14.04.1
  • OR icedtea-7-jre-jamvm is earlier than 0:7u71-2.5.3-0ubuntu0.14.04.1
  • OR openjdk-7-jre-headless is earlier than 0:7u71-2.5.3-0ubuntu0.14.04.1
  • OR openjdk-7-jre is earlier than 0:7u71-2.5.3-0ubuntu0.14.04.1
  • BACK