ICU: layout engine glyphStorage off-by-one (OpenJDK 2D, 8067699)
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
Configuration 1 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Oracle Java for Red Hat Enterprise Linux 5 | |||
| java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11 | cpe:/a:redhat:rhel_extras_oracle_java:5 | RHSA-2015:0857 | 2015-04-20T00:00:00Z |
| java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11 | cpe:/a:redhat:rhel_extras_oracle_java:5 | RHSA-2015:0858 | 2015-04-20T00:00:00Z |
| Oracle Java for Red Hat Enterprise Linux 6 | |||
| java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6 | cpe:/a:redhat:rhel_extras_oracle_java:6 | RHSA-2015:0854 | 2015-04-17T00:00:00Z |
| java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6 | cpe:/a:redhat:rhel_extras_oracle_java:6 | RHSA-2015:0857 | 2015-04-20T00:00:00Z |
| java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6 | cpe:/a:redhat:rhel_extras_oracle_java:6 | RHSA-2015:0858 | 2015-04-20T00:00:00Z |
| Oracle Java for Red Hat Enterprise Linux 7 | |||
| java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1 | cpe:/a:redhat:rhel_extras_oracle_java:7 | RHSA-2015:0854 | 2015-04-17T00:00:00Z |
| java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1 | cpe:/a:redhat:rhel_extras_oracle_java:7 | RHSA-2015:0857 | 2015-04-20T00:00:00Z |
| java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1 | cpe:/a:redhat:rhel_extras_oracle_java:7 | RHSA-2015:0858 | 2015-04-20T00:00:00Z |
| Red Hat Enterprise Linux 5 | |||
| java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11 | cpe:/o:redhat:enterprise_linux:5 | RHSA-2015:0807 | 2015-04-14T00:00:00Z |
| java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11 | cpe:/o:redhat:enterprise_linux:5 | RHSA-2015:0808 | 2015-04-15T00:00:00Z |
| Red Hat Enterprise Linux 5 Supplementary | |||
| java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el5 | cpe:/a:redhat:rhel_extras:5 | RHSA-2015:1006 | 2015-05-13T00:00:00Z |
| java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5 | cpe:/a:redhat:rhel_extras:5 | RHSA-2015:1007 | 2015-05-13T00:00:00Z |
| java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el5 | cpe:/a:redhat:rhel_extras:5 | RHSA-2015:1021 | 2015-05-20T00:00:00Z |
| Red Hat Enterprise Linux 6 | |||
| java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6 | cpe:/o:redhat:enterprise_linux:6 | RHSA-2015:0806 | 2015-04-15T00:00:00Z |
| java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6 | cpe:/o:redhat:enterprise_linux:6 | RHSA-2015:0808 | 2015-04-15T00:00:00Z |
| java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6 | cpe:/o:redhat:enterprise_linux:6 | RHSA-2015:0809 | 2015-04-15T00:00:00Z |
| Red Hat Enterprise Linux 7 | |||
| java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2015:0806 | 2015-04-15T00:00:00Z |
| java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2015:0808 | 2015-04-15T00:00:00Z |
| java-1.8.0-openjdk-1:1.8.0.45-30.b13.ael7b_1 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2015:0809 | 2015-04-15T00:00:00Z |
| Red Hat Satellite 5.6 | |||
| java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el5 | cpe:/a:redhat:network_satellite:5.6::el5 | RHSA-2015:1091 | 2015-06-11T00:00:00Z |
| Red Hat Satellite 5.7 | |||
| java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6 | cpe:/a:redhat:network_satellite:5.7::el6 | RHSA-2015:1091 | 2015-06-11T00:00:00Z |
| Supplementary for Red Hat Enterprise Linux 6 | |||
| java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6 | cpe:/a:redhat:rhel_extras:6 | RHSA-2015:1006 | 2015-05-13T00:00:00Z |
| java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6 | cpe:/a:redhat:rhel_extras:6 | RHSA-2015:1020 | 2015-05-20T00:00:00Z |
| java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6 | cpe:/a:redhat:rhel_extras:6 | RHSA-2015:1021 | 2015-05-20T00:00:00Z |
| Supplementary for Red Hat Enterprise Linux 7 | |||
| java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.ael7b_1 | cpe:/a:redhat:rhel_extras:7 | RHSA-2015:1020 | 2015-05-20T00:00:00Z |
No data available yet.
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-213-1 | openjdk-6 security update |
Debian DSA |
DSA-3234-1 | openjdk-6 security update |
Debian DSA |
DSA-3235-1 | openjdk-7 security update |
Debian DSA |
DSA-3316-1 | openjdk-7 security update |
EUVD |
EUVD-2015-0482 | Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. |
Ubuntu USN |
USN-2573-1 | OpenJDK 6 vulnerabilities |
Ubuntu USN |
USN-2574-1 | OpenJDK 7 vulnerabilities |
No CVSS v4.0
No CVSS v3.1
No CVSS v3.0
This CVE is not in the KEV list.
Exploit prediction score: 6.4% (6.408% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|