CVE-2014-0460

OpenJDK: missing randomization of JNDI DNS client query IDs (JNDI, 8030731)

Published Apr 16, 2014 CVSS 2.0 · 5.8 Medium EPSS 4.3% KEV · Not listed
Description
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via vectors related to JNDI.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2912-1 openjdk-6 security update
Debian DSA Debian DSA DSA-2923-1 openjdk-7 security update
EUVD EUVD EUVD-2014-0498 Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via vectors related to JNDI.
Ubuntu USN Ubuntu USN USN-2187-1 OpenJDK 7 vulnerabilities
Ubuntu USN Ubuntu USN USN-2191-1 OpenJDK 6 vulnerabilities
References
Link Providers
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698 cve-icon cve-icon
http://marc.info/?l=bugtraq&m=140852886808946&w=2 cve-icon cve-icon
http://marc.info/?l=bugtraq&m=140852974709252&w=2 cve-icon cve-icon
http://rhn.redhat.com/errata/RHSA-2014-0675.html cve-icon cve-icon
http://rhn.redhat.com/errata/RHSA-2014-0685.html cve-icon cve-icon
http://secunia.com/advisories/58415 cve-icon cve-icon
http://secunia.com/advisories/59022 cve-icon cve-icon
http://secunia.com/advisories/59023 cve-icon cve-icon
http://secunia.com/advisories/59058 cve-icon cve-icon
http://secunia.com/advisories/59071 cve-icon cve-icon
http://secunia.com/advisories/59082 cve-icon cve-icon
http://secunia.com/advisories/59250 cve-icon cve-icon
http://secunia.com/advisories/59255 cve-icon cve-icon
http://secunia.com/advisories/59307 cve-icon cve-icon
http://secunia.com/advisories/59436 cve-icon cve-icon
http://secunia.com/advisories/59516 cve-icon cve-icon
http://secunia.com/advisories/59642 cve-icon cve-icon
http://secunia.com/advisories/59704 cve-icon cve-icon
http://secunia.com/advisories/59705 cve-icon cve-icon
http://secunia.com/advisories/59706 cve-icon cve-icon
http://secunia.com/advisories/60003 cve-icon cve-icon
http://secunia.com/advisories/60111 cve-icon cve-icon
http://secunia.com/advisories/60117 cve-icon cve-icon
http://secunia.com/advisories/61264 cve-icon cve-icon
http://security.gentoo.org/glsa/glsa-201406-32.xml cve-icon cve-icon
http://security.gentoo.org/glsa/glsa-201502-12.xml cve-icon cve-icon
http://www-01.ibm.com/support/docview.wss?uid=swg21672080 cve-icon cve-icon
http://www-01.ibm.com/support/docview.wss?uid=swg21673836 cve-icon cve-icon
http://www-01.ibm.com/support/docview.wss?uid=swg21674539 cve-icon cve-icon
http://www-01.ibm.com/support/docview.wss?uid=swg21676315 cve-icon cve-icon
http://www-01.ibm.com/support/docview.wss?uid=swg21676672 cve-icon cve-icon
http://www-01.ibm.com/support/docview.wss?uid=swg21676746 cve-icon cve-icon
http://www-01.ibm.com/support/docview.wss?uid=swg21677294 cve-icon cve-icon
http://www-01.ibm.com/support/docview.wss?uid=swg21679713 cve-icon cve-icon
http://www-01.ibm.com/support/docview.wss?uid=swg21681018 cve-icon cve-icon
http://www-01.ibm.com/support/docview.wss?uid=swg21681256 cve-icon cve-icon
http://www-01.ibm.com/support/docview.wss?uid=swg21683484 cve-icon cve-icon
http://www-01.ibm.com/support/docview.wss?uid=swg21686717 cve-icon cve-icon
http://www.debian.org/security/2014/dsa-2912 cve-icon cve-icon
http://www.ibm.com/support/docview.wss?uid=swg21675343 cve-icon cve-icon
http://www.ibm.com/support/docview.wss?uid=swg21675588 cve-icon cve-icon
http://www.ibm.com/support/docview.wss?uid=swg21677387 cve-icon cve-icon
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html cve-icon cve-icon
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA cve-icon
http://www.securityfocus.com/bid/66916 cve-icon cve-icon
http://www.ubuntu.com/usn/USN-2187-1 cve-icon cve-icon
http://www.ubuntu.com/usn/USN-2191-1 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2014:0413 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2014:0414 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2014-0460 cve-icon
https://www.cve.org/CVERecord?id=CVE-2014-0460 cve-icon
History

No history.