Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

Metrics

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

This CVE is not in the KEV list.

The EPSS score is 0.08192.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Canonical
  • Ubuntu Linux
Debian
  • Debian Linux
Ibm
  • Forms Viewer
Juniper
  • Junos Space
Microsoft
  • Windows
Oracle
  • Jdk
  • Jre
  • Jrockit
Redhat
  • Enterprise Linux
  • Rhel Extras
  • Rhel Extras Oracle Java

Configuration 1 [-]

OR cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*

Configuration 2 [-]

OR cpe:2.3:a:oracle:jrockit:r27.8.1:*:*:*:*:*:*:*
cpe:2.3:a:oracle:jrockit:r28.3.1:*:*:*:*:*:*:*

Configuration 3 [-]

cpe:2.3:a:juniper:junos_space:*:*:*:*:*:*:*:*

Configuration 4 [-]

OR cpe:2.3:a:oracle:jdk:1.5.0:update61:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.6.0:update71:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.7.0:update51:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.8.0:-:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.5.0:update61:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.6.0:update71:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.7.0:update51:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.8.0:-:*:*:*:*:*:*

Configuration 5 [-]

OR cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Configuration 6 [-]

AND
OR cpe:2.3:a:ibm:forms_viewer:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:forms_viewer:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
Package CPE Advisory Released Date
Oracle Java for Red Hat Enterprise Linux 5
java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10 cpe:/a:redhat:rhel_extras_oracle_java:5 RHSA-2014:0413 2014-04-17T00:00:00Z
java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10 cpe:/a:redhat:rhel_extras_oracle_java:5 RHSA-2014:0414 2014-04-17T00:00:00Z
Oracle Java for Red Hat Enterprise Linux 6
java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5 cpe:/a:redhat:rhel_extras_oracle_java:6 RHSA-2014:0413 2014-04-17T00:00:00Z
java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5 cpe:/a:redhat:rhel_extras_oracle_java:6 RHSA-2014:0414 2014-04-17T00:00:00Z
Red Hat Enterprise Linux 5
java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10 cpe:/o:redhat:enterprise_linux:5 RHSA-2014:0407 2014-04-16T00:00:00Z
java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10 cpe:/o:redhat:enterprise_linux:5 RHSA-2014:0408 2014-04-16T00:00:00Z
Red Hat Enterprise Linux 6
java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5 cpe:/o:redhat:enterprise_linux:6 RHSA-2014:0406 2014-04-16T00:00:00Z
java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5 cpe:/o:redhat:enterprise_linux:6 RHSA-2014:0408 2014-04-16T00:00:00Z
Red Hat Enterprise Linux 7
java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0 cpe:/o:redhat:enterprise_linux:7 RHSA-2014:0675 2014-06-10T00:00:00Z
java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0 cpe:/o:redhat:enterprise_linux:7 RHSA-2014:0685 2014-06-10T00:00:00Z
Supplementary for Red Hat Enterprise Linux 5
java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10 cpe:/a:redhat:rhel_extras:5 RHSA-2014:0412 2014-04-17T00:00:00Z
Supplementary for Red Hat Enterprise Linux 6
java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5 cpe:/a:redhat:rhel_extras:6 RHSA-2014:0412 2014-04-17T00:00:00Z

No data.

References
Link Providers
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698 cve-icon cve-icon
http://marc.info/?l=bugtraq&m=140852886808946&w=2 cve-icon cve-icon
http://marc.info/?l=bugtraq&m=140852974709252&w=2 cve-icon cve-icon
http://rhn.redhat.com/errata/RHSA-2014-0675.html cve-icon cve-icon
http://rhn.redhat.com/errata/RHSA-2014-0685.html cve-icon cve-icon
http://secunia.com/advisories/58415 cve-icon cve-icon
http://security.gentoo.org/glsa/glsa-201406-32.xml cve-icon cve-icon
http://security.gentoo.org/glsa/glsa-201502-12.xml cve-icon cve-icon
http://www.debian.org/security/2014/dsa-2912 cve-icon cve-icon
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html cve-icon cve-icon
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA cve-icon
http://www.securityfocus.com/bid/66877 cve-icon cve-icon
http://www.ubuntu.com/usn/USN-2187-1 cve-icon cve-icon
http://www.ubuntu.com/usn/USN-2191-1 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2014:0413 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2014:0414 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2014-0456 cve-icon
https://www.cve.org/CVERecord?id=CVE-2014-0456 cve-icon
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: oracle

Published:

Updated: 2024-08-06T09:13:10.703Z

Reserved: 2013-12-12T00:00:00

Link: CVE-2014-0456

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2014-04-16T01:55:09.773

Modified: 2025-04-12T10:46:40.837

Link: CVE-2014-0456

cve-icon Redhat

Severity : Critical

Publid Date: 2014-04-15T00:00:00Z

Links: CVE-2014-0456 - Bugzilla

cve-icon OpenCVE Enrichment

No data.