// For flags

CVE-2014-0460

OpenJDK: missing randomization of JNDI DNS client query IDs (JNDI, 8030731)

Severity Score

5.8
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via vectors related to JNDI.

Vulnerabilidad no especificada en Oracle Java SE 5.0u61, 6u71, 7u51, y 8; JRockit R27.8.1 y R28.3.1; y Java SE Embedded 7u51 permite a atacantes remotos afectar a la confidencialidad e integridad mediante vectores relacionados con JNDI.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2013-12-12 CVE Reserved
  • 2014-04-16 CVE Published
  • 2023-11-26 EPSS Updated
  • 2024-08-06 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
CAPEC
References (50)
URL Tag Source
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698 Third Party Advisory
http://secunia.com/advisories/58415 Third Party Advisory
http://secunia.com/advisories/59022 Third Party Advisory
http://secunia.com/advisories/59023 Third Party Advisory
http://secunia.com/advisories/59058 Third Party Advisory
http://secunia.com/advisories/59071 Third Party Advisory
http://secunia.com/advisories/59082 Third Party Advisory
http://secunia.com/advisories/59250 Third Party Advisory
http://secunia.com/advisories/59255 Third Party Advisory
http://secunia.com/advisories/59307 Third Party Advisory
http://secunia.com/advisories/59436 Third Party Advisory
http://secunia.com/advisories/59516 Third Party Advisory
http://secunia.com/advisories/59642 Third Party Advisory
http://secunia.com/advisories/59704 Third Party Advisory
http://secunia.com/advisories/59705 Third Party Advisory
http://secunia.com/advisories/59706 Third Party Advisory
http://secunia.com/advisories/60003 Third Party Advisory
http://secunia.com/advisories/60111 Third Party Advisory
http://secunia.com/advisories/60117 Third Party Advisory
http://secunia.com/advisories/61264 Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21672080 Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21673836 Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21674539 Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21676315 Broken Link
http://www-01.ibm.com/support/docview.wss?uid=swg21676672 Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21676746 Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21677294 Broken Link
http://www-01.ibm.com/support/docview.wss?uid=swg21679713 Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21681018 Broken Link
http://www-01.ibm.com/support/docview.wss?uid=swg21681256 Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21683484 Broken Link
http://www-01.ibm.com/support/docview.wss?uid=swg21686717 Third Party Advisory
http://www.ibm.com/support/docview.wss?uid=swg21675343 Third Party Advisory
http://www.ibm.com/support/docview.wss?uid=swg21675588 Broken Link
http://www.ibm.com/support/docview.wss?uid=swg21677387 Third Party Advisory
http://www.securityfocus.com/bid/66916 Third Party Advisory
URL Date SRC
URL Date SRC
URL Date SRC
http://marc.info/?l=bugtraq&m=140852886808946&w=2 2022-05-13
http://marc.info/?l=bugtraq&m=140852974709252&w=2 2022-05-13
http://rhn.redhat.com/errata/RHSA-2014-0675.html 2022-05-13
http://rhn.redhat.com/errata/RHSA-2014-0685.html 2022-05-13
http://security.gentoo.org/glsa/glsa-201406-32.xml 2022-05-13
http://security.gentoo.org/glsa/glsa-201502-12.xml 2022-05-13
http://www.debian.org/security/2014/dsa-2912 2022-05-13
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html 2022-05-13
http://www.ubuntu.com/usn/USN-2187-1 2022-05-13
http://www.ubuntu.com/usn/USN-2191-1 2022-05-13
https://access.redhat.com/errata/RHSA-2014:0413 2022-05-13
https://access.redhat.com/errata/RHSA-2014:0414 2022-05-13
https://access.redhat.com/security/cve/CVE-2014-0460 2014-07-29
https://bugzilla.redhat.com/show_bug.cgi?id=1087442 2014-07-29
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Oracle
Search vendor "Oracle"
 Jrockit
Search vendor "Oracle" for product "Jrockit"
 r27.8.1
Search vendor "Oracle" for product "Jrockit" and version "r27.8.1"
-
Affected
Oracle
Search vendor "Oracle"
 Jrockit
Search vendor "Oracle" for product "Jrockit"
 r28.3.1
Search vendor "Oracle" for product "Jrockit" and version "r28.3.1"
-
Affected
Canonical
Search vendor "Canonical"
 Ubuntu Linux
Search vendor "Canonical" for product "Ubuntu Linux"
 10.04
Search vendor "Canonical" for product "Ubuntu Linux" and version "10.04"
-
Affected
Canonical
Search vendor "Canonical"
 Ubuntu Linux
Search vendor "Canonical" for product "Ubuntu Linux"
 12.04
Search vendor "Canonical" for product "Ubuntu Linux" and version "12.04"
-
Affected
Canonical
Search vendor "Canonical"
 Ubuntu Linux
Search vendor "Canonical" for product "Ubuntu Linux"
 12.10
Search vendor "Canonical" for product "Ubuntu Linux" and version "12.10"
-
Affected
Canonical
Search vendor "Canonical"
 Ubuntu Linux
Search vendor "Canonical" for product "Ubuntu Linux"
 13.10
Search vendor "Canonical" for product "Ubuntu Linux" and version "13.10"
-
Affected
Canonical
Search vendor "Canonical"
 Ubuntu Linux
Search vendor "Canonical" for product "Ubuntu Linux"
 14.04
Search vendor "Canonical" for product "Ubuntu Linux" and version "14.04"
esm
Affected
Juniper
Search vendor "Juniper"
 Junos Space
Search vendor "Juniper" for product "Junos Space"
 < 15.1
Search vendor "Juniper" for product "Junos Space" and version " < 15.1"
-
Affected
Oracle
Search vendor "Oracle"
 Jdk
Search vendor "Oracle" for product "Jdk"
 1.5.0
Search vendor "Oracle" for product "Jdk" and version "1.5.0"
update61
Affected
Oracle
Search vendor "Oracle"
 Jdk
Search vendor "Oracle" for product "Jdk"
 1.6.0
Search vendor "Oracle" for product "Jdk" and version "1.6.0"
update71
Affected
Oracle
Search vendor "Oracle"
 Jdk
Search vendor "Oracle" for product "Jdk"
 1.7.0
Search vendor "Oracle" for product "Jdk" and version "1.7.0"
update51
Affected
Oracle
Search vendor "Oracle"
 Jdk
Search vendor "Oracle" for product "Jdk"
 1.8.0
Search vendor "Oracle" for product "Jdk" and version "1.8.0"
-
Affected
Oracle
Search vendor "Oracle"
 Jre
Search vendor "Oracle" for product "Jre"
 1.5.0
Search vendor "Oracle" for product "Jre" and version "1.5.0"
update61
Affected
Oracle
Search vendor "Oracle"
 Jre
Search vendor "Oracle" for product "Jre"
 1.6.0
Search vendor "Oracle" for product "Jre" and version "1.6.0"
update71
Affected
Oracle
Search vendor "Oracle"
 Jre
Search vendor "Oracle" for product "Jre"
 1.7.0
Search vendor "Oracle" for product "Jre" and version "1.7.0"
update51
Affected
Oracle
Search vendor "Oracle"
 Jre
Search vendor "Oracle" for product "Jre"
 1.8.0
Search vendor "Oracle" for product "Jre" and version "1.8.0"
-
Affected
Debian
Search vendor "Debian"
 Debian Linux
Search vendor "Debian" for product "Debian Linux"
 6.0
Search vendor "Debian" for product "Debian Linux" and version "6.0"
-
Affected
Debian
Search vendor "Debian"
 Debian Linux
Search vendor "Debian" for product "Debian Linux"
 7.0
Search vendor "Debian" for product "Debian Linux" and version "7.0"
-
Affected
Debian
Search vendor "Debian"
 Debian Linux
Search vendor "Debian" for product "Debian Linux"
 8.0
Search vendor "Debian" for product "Debian Linux" and version "8.0"
-
Affected