CVE-2014-2414

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXB.

Score

CVSS 2.0 7.5 High

Status

Modified - secalert_us@oracle.com

Published

2014-04-16

Last modified

2024-08-06

Affected products

• Ubuntu Linux (Canonical)
• Debian Linux (Debian)
• Jdk (Oracle)
• Jre (Oracle)

References

• http://marc.info/?l=bugtraq&m=140852886808946&w=2
• http://marc.info/?l=bugtraq&m=140852974709252&w=2
• http://rhn.redhat.com/errata/RHSA-2014-0675.html
• http://rhn.redhat.com/errata/RHSA-2014-0685.html
• http://secunia.com/advisories/58415
• http://security.gentoo.org/glsa/glsa-201406-32.xml
• http://security.gentoo.org/glsa/glsa-201502-12.xml
• http://www-01.ibm.com/support/docview.wss?uid=swg21672080
• http://www.debian.org/security/2014/dsa-2912
• http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html
• http://www.securityfocus.com/bid/66894
• http://www.ubuntu.com/usn/USN-2187-1
• http://www.ubuntu.com/usn/USN-2191-1
• https://access.redhat.com/errata/RHSA-2014:0413
• https://access.redhat.com/errata/RHSA-2014:0414