CVSS: 4.3EPSS: 0%CPEs: 11EXPL: 0CVE-2014-6512 – OpenJDK: DatagramSocket connected socket missing source check (Libraries, 8039509)
https://notcve.org/view.php?id=CVE-2014-6512
Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and R28.3.3 allows remote attackers to affect integrity via unknown vectors related to Libraries. Vulnerabilidad sin especificar en Oracle Java SE 5.0u71, 6u81, 7u67, y 8u20; Java SE Embedded 7u60; y JRockit R27.8.3 y R28.3.3 permite a atacantes remotos afectar a la integridad a través de vectores relacionados con las librerías. It was discovered that the DatagramSocket implementation in OpenJDK failed to perform source address checks for packets received on a connected socket. A remote attacker could use this flaw to have their packets processed as if they were received from the expected source. • http://linux.oracle.com/errata/ELSA-2014-1633.html http://linux.oracle.com/errata/ELSA-2014-1634.html http://linux.oracle.com/errata/ELSA-2014-1636 http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00013.html http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.html http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html http://lists.opensuse.org/opensuse-security-annou • CWE-345: Insufficient Verification of Data Authenticity •
CVSS: 5.0EPSS: 1%CPEs: 4EXPL: 0CVE-2014-6519 – OpenJDK: missing BootstrapMethods bounds check (Hotspot, 8041717)
https://notcve.org/view.php?id=CVE-2014-6519
Unspecified vulnerability in Oracle Java SE 7u67 and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect integrity via unknown vectors related to Hotspot. Vulnerabilidad sin especificar en Oracle Java SE 7u67 y 8u20, y Java SE Embedded 7u60, permite a atacantes remotos afectar la integridad a través de vectores desconocidos relacionados con el Hotspot. • http://linux.oracle.com/errata/ELSA-2014-1633.html http://linux.oracle.com/errata/ELSA-2014-1634.html http://linux.oracle.com/errata/ELSA-2014-1636 http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00013.html http://marc.info/?l=bugtraq&m=141775382904016&w=2 http://rhn.redhat.com/errata/RHSA-2014-1620.html http://rhn.redhat.com/errata/RHSA-2014-1633.html http://rhn.redhat.com/errata/RHSA-2014-1634.html http://rhn.redhat.com/errata/RHSA-2014-1636. •
CVSS: 6.8EPSS: 2%CPEs: 8EXPL: 0CVE-2014-6506 – OpenJDK: insufficient permission checks when setting resource bundle on system logger (Libraries, 8041564)
https://notcve.org/view.php?id=CVE-2014-6506
Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. Vulnerabilidad sin especificar en Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, y Java SE Embedded 7u60, permite a atacantes remotos afectar la confidencialidad, la integridad y la disponibilidad a través de vectores relacionados con las librerías. • http://linux.oracle.com/errata/ELSA-2014-1633.html http://linux.oracle.com/errata/ELSA-2014-1634.html http://linux.oracle.com/errata/ELSA-2014-1636 http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00013.html http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.html http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html http://lists.opensuse.org/opensuse-security-annou •
CVSS: 5.0EPSS: 1%CPEs: 7EXPL: 0CVE-2014-6504 – OpenJDK: incorrect optimization of range checks in C2 compiler (Hotspot, 8022783)
https://notcve.org/view.php?id=CVE-2014-6504
Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, and 7u67, and Java SE Embedded 7u60, allows remote attackers to affect confidentiality via unknown vectors related to Hotspot. Vulnerabilidad sin especificar en Oracle Java SE 5.0u71, 6u81, y 7u67, y Java SE Embedded 7u60, permite a atacantes remotos afectar a a la confidencialidad a través de vectores relacionados con Hotspot. • http://linux.oracle.com/errata/ELSA-2014-1633.html http://linux.oracle.com/errata/ELSA-2014-1634.html http://linux.oracle.com/errata/ELSA-2014-1636 http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00013.html http://marc.info/?l=bugtraq&m=141775382904016&w=2 http://rhn.redhat.com/errata/RHSA-2014-1620.html http://rhn.redhat.com/errata/RHSA-2014-1633.html http://rhn.redhat.com/errata/RHSA-2014-1634.html http://rhn.redhat.com/errata/RHSA-2014-1636. •
CVSS: 5.0EPSS: 1%CPEs: 8EXPL: 0CVE-2014-6517 – OpenJDK: StAX parser parameter entity XXE (JAXP, 8039533)
https://notcve.org/view.php?id=CVE-2014-6517
Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and Jrockit R27.8.3 and R28.3.3 allows remote attackers to affect confidentiality via vectors related to JAXP. Vulnerabilidad sin especificar en Oracle Java SE 6u81, 7u67, y 8u20; Java SE Embedded 7u60; y Jrockit R27.8.3 y R28.3.3, permite a atacantes remotos afectar a la confidencialidad a través de vectores relacionados con JAXP. It was discovered that the StAX XML parser in the JAXP component in OpenJDK performed expansion of external parameter entities even when external entity substitution was disabled. A remote attacker could use this flaw to perform XML eXternal Entity (XXE) attack against applications using the StAX parser to parse untrusted XML documents. • http://linux.oracle.com/errata/ELSA-2014-1633.html http://linux.oracle.com/errata/ELSA-2014-1634.html http://linux.oracle.com/errata/ELSA-2014-1636 http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00013.html http://marc.info/?l=bugtraq&m=141775382904016&w=2 http://rhn.redhat.com/errata/RHSA-2014-1620.html http://rhn.redhat.com/errata/RHSA-2014-1633.html http://rhn.redhat.com/errata/RHSA-2014-1634.html http://rhn.redhat.com/errata/RHSA-2014-1636. •