JCE: missing EC parameter validation in ECDH_Derive() (OpenJDK JCE, 8075833)
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
Configuration 1 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Oracle Java for Red Hat Enterprise Linux 5 | |||
| java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11 | cpe:/a:redhat:rhel_extras_oracle_java:5 | RHSA-2015:1242 | 2015-07-17T00:00:00Z |
| Oracle Java for Red Hat Enterprise Linux 6 | |||
| java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6 | cpe:/a:redhat:rhel_extras_oracle_java:6 | RHSA-2015:1241 | 2015-07-17T00:00:00Z |
| java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6 | cpe:/a:redhat:rhel_extras_oracle_java:6 | RHSA-2015:1242 | 2015-07-17T00:00:00Z |
| Oracle Java for Red Hat Enterprise Linux 7 | |||
| java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1 | cpe:/a:redhat:rhel_extras_oracle_java:7 | RHSA-2015:1241 | 2015-07-17T00:00:00Z |
| java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1 | cpe:/a:redhat:rhel_extras_oracle_java:7 | RHSA-2015:1242 | 2015-07-17T00:00:00Z |
| Red Hat Enterprise Linux 5 Supplementary | |||
| java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5 | cpe:/a:redhat:rhel_extras:5 | RHSA-2015:1488 | 2015-07-23T00:00:00Z |
| Red Hat Enterprise Linux 6 Supplementary | |||
| java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7 | cpe:/a:redhat:rhel_extras:6 | RHSA-2015:1485 | 2015-07-22T00:00:00Z |
| Supplementary for Red Hat Enterprise Linux 7 | |||
| java-1.7.1-ibm-1:1.7.1.3.10-1jpp.1.ael7b_1 | cpe:/a:redhat:rhel_extras:7 | RHSA-2015:1485 | 2015-07-22T00:00:00Z |
No data available yet.
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-3316-1 | openjdk-7 security update |
Debian DSA |
DSA-3339-1 | openjdk-6 security update |
EUVD |
EUVD-2015-2705 | Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JCE. |
Ubuntu USN |
USN-2696-1 | OpenJDK 7 vulnerabilities |
No CVSS v4.0
No CVSS v3.1
No CVSS v3.0
This CVE is not in the KEV list.
Exploit prediction score: 3.8% (3.813% probability within 30 days)
Key SSVC decision points have not yet been added.
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
epss
|
epss
|