CVE-2014-6504

critical

Description

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, and 7u67, and Java SE Embedded 7u60, allows remote attackers to affect confidentiality via unknown vectors related to Hotspot.

References

http://www.ubuntu.com/usn/USN-2388-2

http://www.ubuntu.com/usn/USN-2388-1

http://www.ubuntu.com/usn/USN-2386-1

http://www.securityfocus.com/bid/70564

http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html

http://www.debian.org/security/2014/dsa-3080

http://www.debian.org/security/2014/dsa-3077

http://security.gentoo.org/glsa/glsa-201502-12.xml

http://secunia.com/advisories/61928

http://secunia.com/advisories/61629

http://secunia.com/advisories/61609

http://secunia.com/advisories/61346

http://secunia.com/advisories/61164

http://secunia.com/advisories/61163

http://secunia.com/advisories/61143

http://secunia.com/advisories/61020

http://secunia.com/advisories/61018

http://secunia.com/advisories/60417

http://secunia.com/advisories/60416

http://secunia.com/advisories/60414

http://rhn.redhat.com/errata/RHSA-2014-1658.html

http://rhn.redhat.com/errata/RHSA-2014-1657.html

http://rhn.redhat.com/errata/RHSA-2014-1636.html

http://rhn.redhat.com/errata/RHSA-2014-1634.html

http://rhn.redhat.com/errata/RHSA-2014-1633.html

http://rhn.redhat.com/errata/RHSA-2014-1620.html

http://marc.info/?l=bugtraq&m=141775382904016&w=2

http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00013.html

http://linux.oracle.com/errata/ELSA-2014-1636

http://linux.oracle.com/errata/ELSA-2014-1634.html

http://linux.oracle.com/errata/ELSA-2014-1633.html

Details

Source: Mitre, NVD

Published: 2014-10-15

Updated: 2024-11-21

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical