Oracle Java SE Multiple Vulnerabilities (July 2014 CPU) (Unix)

critical Nessus Plugin ID 76533

Language:

Synopsis

The remote Unix host contains a programming platform that is affected by multiple vulnerabilities.

Description

The version of Oracle (formerly Sun) Java SE or Java for Business installed on the remote host is prior to 8 Update 11, 7 Update 65, 6 Update 81, or 5 Update 71. It is, therefore, affected by security issues in the following components :

- Deployment
- Hotspot
- JavaFX
- JMX
- Libraries
- Security
- Serviceability
- Swing

Solution

Update to JDK / JRE 8 Update 11, 7 Update 65, 6 Update 81, or 5 Update 71 or later and, if necessary, remove any affected versions.

Note that an extended support contract with Oracle is needed to obtain JDK / JRE 5 Update 71 or later or 6 Update 81 or later.

Plugin Details

Severity: Critical

ID: 76533

File Name: oracle_java_cpu_jul_2014_unix.nasl

Version: 1.10

Type: local

Agent: unix

Family: Misc.

Published: 7/16/2014

Updated: 4/11/2022

Configuration: Enable thorough checks

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 7.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: cpe:/a:oracle:jdk, cpe:/a:oracle:jre

Required KB Items: Host/Java/JRE/Installed

Exploit Ease: No known exploits are available

Patch Publication Date: 7/15/2014

Vulnerability Publication Date: 7/15/2014

Reference Information

CVE: CVE-2014-2483, CVE-2014-2490, CVE-2014-4208, CVE-2014-4209, CVE-2014-4216, CVE-2014-4218, CVE-2014-4219, CVE-2014-4220, CVE-2014-4221, CVE-2014-4223, CVE-2014-4227, CVE-2014-4244, CVE-2014-4247, CVE-2014-4252, CVE-2014-4262, CVE-2014-4263, CVE-2014-4264, CVE-2014-4265, CVE-2014-4266, CVE-2014-4268

Detections

Analytics