OpenJDK: deserialization issue in ObjectInputStream.readSerialData() (Libraries, 8076401)
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
Configuration 1 [-]
|
Configuration 2 [-]
|
Configuration 3 [-]
|
Configuration 4 [-]
|
Configuration 5 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Oracle Java for Red Hat Enterprise Linux 5 | |||
| java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11 | cpe:/a:redhat:rhel_extras_oracle_java:5 | RHSA-2015:1242 | 2015-07-17T00:00:00Z |
| java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11 | cpe:/a:redhat:rhel_extras_oracle_java:5 | RHSA-2015:1243 | 2015-07-17T00:00:00Z |
| Oracle Java for Red Hat Enterprise Linux 6 | |||
| java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6 | cpe:/a:redhat:rhel_extras_oracle_java:6 | RHSA-2015:1241 | 2015-07-17T00:00:00Z |
| java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6 | cpe:/a:redhat:rhel_extras_oracle_java:6 | RHSA-2015:1242 | 2015-07-17T00:00:00Z |
| java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6 | cpe:/a:redhat:rhel_extras_oracle_java:6 | RHSA-2015:1243 | 2015-07-17T00:00:00Z |
| Oracle Java for Red Hat Enterprise Linux 7 | |||
| java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1 | cpe:/a:redhat:rhel_extras_oracle_java:7 | RHSA-2015:1241 | 2015-07-17T00:00:00Z |
| java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1 | cpe:/a:redhat:rhel_extras_oracle_java:7 | RHSA-2015:1242 | 2015-07-17T00:00:00Z |
| java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1 | cpe:/a:redhat:rhel_extras_oracle_java:7 | RHSA-2015:1243 | 2015-07-17T00:00:00Z |
| Red Hat Enterprise Linux 5 | |||
| java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11 | cpe:/o:redhat:enterprise_linux:5 | RHSA-2015:1230 | 2015-07-15T00:00:00Z |
| java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11 | cpe:/o:redhat:enterprise_linux:5 | RHSA-2015:1526 | 2015-07-30T00:00:00Z |
| Red Hat Enterprise Linux 5 Supplementary | |||
| java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5 | cpe:/a:redhat:rhel_extras:5 | RHSA-2015:1486 | 2015-07-22T00:00:00Z |
| java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5 | cpe:/a:redhat:rhel_extras:5 | RHSA-2015:1488 | 2015-07-23T00:00:00Z |
| java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5 | cpe:/a:redhat:rhel_extras:5 | RHSA-2015:1544 | 2015-08-04T00:00:00Z |
| Red Hat Enterprise Linux 6 | |||
| java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6 | cpe:/o:redhat:enterprise_linux:6 | RHSA-2015:1228 | 2015-07-15T00:00:00Z |
| java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6 | cpe:/o:redhat:enterprise_linux:6 | RHSA-2015:1229 | 2015-07-15T00:00:00Z |
| java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7 | cpe:/o:redhat:enterprise_linux:6 | RHSA-2015:1526 | 2015-07-30T00:00:00Z |
| Red Hat Enterprise Linux 6 Supplementary | |||
| java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7 | cpe:/a:redhat:rhel_extras:6 | RHSA-2015:1485 | 2015-07-22T00:00:00Z |
| java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7 | cpe:/a:redhat:rhel_extras:6 | RHSA-2015:1486 | 2015-07-22T00:00:00Z |
| java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7 | cpe:/a:redhat:rhel_extras:6 | RHSA-2015:1544 | 2015-08-04T00:00:00Z |
| Red Hat Enterprise Linux 7 | |||
| java-1.8.0-openjdk-1:1.8.0.51-1.b16.ael7b_1 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2015:1228 | 2015-07-15T00:00:00Z |
| java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2015:1229 | 2015-07-15T00:00:00Z |
| java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2015:1526 | 2015-07-30T00:00:00Z |
| Red Hat Satellite 5.6 | |||
| java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7 | cpe:/a:redhat:network_satellite:5.6::el5 | RHSA-2015:1604 | 2015-08-12T00:00:00Z |
| Red Hat Satellite 5.7 | |||
| java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7 | cpe:/a:redhat:network_satellite:5.7::el6 | RHSA-2015:1604 | 2015-08-12T00:00:00Z |
| Supplementary for Red Hat Enterprise Linux 7 | |||
| java-1.7.1-ibm-1:1.7.1.3.10-1jpp.1.ael7b_1 | cpe:/a:redhat:rhel_extras:7 | RHSA-2015:1485 | 2015-07-22T00:00:00Z |
No data available yet.
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-303-1 | openjdk-6 security update |
Debian DSA |
DSA-3316-1 | openjdk-7 security update |
Debian DSA |
DSA-3339-1 | openjdk-6 security update |
Ubuntu USN |
USN-2696-1 | OpenJDK 7 vulnerabilities |
Ubuntu USN |
USN-2706-1 | OpenJDK 6 vulnerabilities |
No CVSS v4.0
No CVSS v3.0
This CVE is in the KEV database since March 3, 2022.
Exploit prediction score: 25.5% (25.469% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:2.3:a:oracle:jre:1.6.0:update_95:*:*:*:*:*:* cpe:2.3:a:oracle:jre:1.7.0:update_75:*:*:*:*:*:* cpe:2.3:a:oracle:jre:1.7.0:update_80:*:*:*:*:*:* cpe:2.3:a:oracle:jre:1.8.0:update_33:*:*:*:*:*:* cpe:2.3:a:oracle:jre:1.8.0:update_45:*:*:*:*:*:* |
cpe:2.3:a:oracle:jdk:1.8.0:update33:*:*:*:*:*:* cpe:2.3:a:oracle:jre:1.6.0:update95:*:*:*:*:*:* cpe:2.3:a:oracle:jre:1.7.0:update75:*:*:*:*:*:* cpe:2.3:a:oracle:jre:1.7.0:update80:*:*:*:*:*:* cpe:2.3:a:oracle:jre:1.8.0:update33:*:*:*:*:*:* cpe:2.3:a:oracle:jre:1.8.0:update45:*:*:*:*:*:* |
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
kev
|
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|