OpenJDK: insufficient Diffie-Hellman public key validation (Security, 8037162)
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
Configuration 1 [-]
|
Configuration 2 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Oracle Java for Red Hat Enterprise Linux 5 | |||
| java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10 | cpe:/a:redhat:rhel_extras_oracle_java:5 | RHSA-2014:0902 | 2014-07-18T00:00:00Z |
| java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10 | cpe:/a:redhat:rhel_extras_oracle_java:5 | RHSA-2014:0908 | 2014-07-21T00:00:00Z |
| Oracle Java for Red Hat Enterprise Linux 6 | |||
| java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5 | cpe:/a:redhat:rhel_extras_oracle_java:6 | RHSA-2014:0902 | 2014-07-18T00:00:00Z |
| java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5 | cpe:/a:redhat:rhel_extras_oracle_java:6 | RHSA-2014:0908 | 2014-07-21T00:00:00Z |
| Oracle Java for Red Hat Enterprise Linux 7 | |||
| java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7 | cpe:/a:redhat:rhel_extras_oracle_java:7 | RHSA-2014:0902 | 2014-07-18T00:00:00Z |
| java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7 | cpe:/a:redhat:rhel_extras_oracle_java:7 | RHSA-2014:0908 | 2014-07-21T00:00:00Z |
| Red Hat Enterprise Linux 5 | |||
| java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10 | cpe:/o:redhat:enterprise_linux:5 | RHSA-2014:0890 | 2014-07-16T00:00:00Z |
| java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10 | cpe:/o:redhat:enterprise_linux:5 | RHSA-2014:0907 | 2014-07-21T00:00:00Z |
| Red Hat Enterprise Linux 6 | |||
| java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5 | cpe:/o:redhat:enterprise_linux:6 | RHSA-2014:0889 | 2014-07-16T00:00:00Z |
| java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5 | cpe:/o:redhat:enterprise_linux:6 | RHSA-2014:0907 | 2014-07-21T00:00:00Z |
| Red Hat Enterprise Linux 7 | |||
| java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2014:0889 | 2014-07-16T00:00:00Z |
| java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2014:0907 | 2014-07-21T00:00:00Z |
| Red Hat Satellite 5.6 | |||
| java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el5 | cpe:/a:redhat:network_satellite:5.6::el5 | RHSA-2015:0264 | 2015-02-24T00:00:00Z |
| Supplementary for Red Hat Enterprise Linux 5 | |||
| java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el5_10 | cpe:/a:redhat:rhel_extras:5 | RHSA-2014:1033 | 2014-08-07T00:00:00Z |
| java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el5_10 | cpe:/a:redhat:rhel_extras:5 | RHSA-2014:1036 | 2014-08-07T00:00:00Z |
| java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el5_10 | cpe:/a:redhat:rhel_extras:5 | RHSA-2014:1041 | 2014-08-11T00:00:00Z |
| Supplementary for Red Hat Enterprise Linux 6 | |||
| java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5 | cpe:/a:redhat:rhel_extras:6 | RHSA-2014:1033 | 2014-08-07T00:00:00Z |
| java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el6_5 | cpe:/a:redhat:rhel_extras:6 | RHSA-2014:1036 | 2014-08-07T00:00:00Z |
| java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5 | cpe:/a:redhat:rhel_extras:6 | RHSA-2014:1041 | 2014-08-11T00:00:00Z |
| Supplementary for Red Hat Enterprise Linux 7 | |||
| java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0 | cpe:/a:redhat:rhel_extras:7 | RHSA-2014:1042 | 2014-08-11T00:00:00Z |
No data available yet.
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-96-1 | openjdk-6 security update |
Debian DSA |
DSA-2980-1 | openjdk-6 security update |
Debian DSA |
DSA-2987-1 | openjdk-7 security update |
EUVD |
EUVD-2014-4192 | Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5, and JRockit R27.8.2 and R28.3.2, allows remote attackers to affect confidentiality and integrity via unknown vectors related to "Diffie-Hellman key agreement." |
Ubuntu USN |
USN-2312-1 | OpenJDK 6 vulnerabilities |
Ubuntu USN |
USN-2319-1 | OpenJDK 7 vulnerabilities |
No CVSS v4.0
No CVSS v3.1
No CVSS v3.0
This CVE is not in the KEV list.
Exploit prediction score: 3.5% (3.501% probability within 30 days)
Key SSVC decision points have not yet been added.
No history.