CVE-2014-6517

Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and Jrockit R27.8.3 and R28.3.3 allows remote attackers to affect confidentiality via vectors related to JAXP.

Score

CVSS 2.0 5.0 Medium

Status

Modified - secalert_us@oracle.com

Published

2014-10-15

Last modified

2024-08-06

Affected products

• Jdk (Oracle)
• Jre (Oracle)
• Jrockit (Oracle)

References

• http://linux.oracle.com/errata/ELSA-2014-1633.html
• http://linux.oracle.com/errata/ELSA-2014-1634.html
• http://linux.oracle.com/errata/ELSA-2014-1636
• http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00013.html
• http://marc.info/?l=bugtraq&m=141775382904016&w=2
• http://rhn.redhat.com/errata/RHSA-2014-1620.html
• http://rhn.redhat.com/errata/RHSA-2014-1633.html
• http://rhn.redhat.com/errata/RHSA-2014-1634.html
• http://rhn.redhat.com/errata/RHSA-2014-1636.html
• http://rhn.redhat.com/errata/RHSA-2014-1657.html
• http://rhn.redhat.com/errata/RHSA-2014-1658.html
• http://secunia.com/advisories/60414
• http://secunia.com/advisories/60416
• http://secunia.com/advisories/60417
• http://secunia.com/advisories/61018
• http://secunia.com/advisories/61020
• http://secunia.com/advisories/61143
• http://secunia.com/advisories/61163
• http://secunia.com/advisories/61164
• http://secunia.com/advisories/61346
• http://secunia.com/advisories/61609
• http://secunia.com/advisories/61629
• http://secunia.com/advisories/61631
• http://secunia.com/advisories/61928
• http://security.gentoo.org/glsa/glsa-201502-12.xml
• http://www.debian.org/security/2014/dsa-3077
• http://www.debian.org/security/2014/dsa-3080
• http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
• http://www.securityfocus.com/bid/70552
• http://www.ubuntu.com/usn/USN-2386-1