The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2884-1 advisory.

    Multiple vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data     integrity, and availability. An attacker could exploit these to cause a denial of service, expose     sensitive data over the network, or possibly execute arbitrary code. (CVE-2016-0483, CVE-2016-0494)

    A vulnerability was discovered in the OpenJDK JRE related to data integrity. An attacker could exploit     this to expose sensitive data over the network or possibly execute arbitrary code. (CVE-2016-0402)

    It was discovered that OpenJDK 7 incorrectly allowed MD5 to be used for TLS connections. If a remote     attacker were able to perform a machine-in-the-middle attack, this flaw could be exploited to expose     sensitive information. (CVE-2015-7575)

    A vulnerability was discovered in the OpenJDK JRE related to information disclosure. An attacker could     exploit this to expose sensitive data over the network. (CVE-2016-0448)

    A vulnerability was discovered in the OpenJDK JRE related to availability. An attacker could exploit this     to cause a denial of service. (CVE-2016-0466)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 14.04 LTS : OpenJDK 7 vulnerabilities (USN-2884-1)

medium Nessus Plugin ID 88516

Version 2.14