Description

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

References

• AMAZON-ALAS-2015-571
• APPLE-APPLE-SA-2015-06-30-1
• APPLE-APPLE-SA-2015-06-30-2
• BID-72155
• BID-74733
• CVE-2015-0383
• CVE-2015-2590
• CVE-2015-2601
• CVE-2015-2621
• CVE-2015-2625
• CVE-2015-2628
• CVE-2015-2632
• CVE-2015-2659
• CVE-2015-2808
• CVE-2015-3149
• CVE-2015-4000
• CVE-2015-4731
• CVE-2015-4732
• CVE-2015-4733
• CVE-2015-4748
• CVE-2015-4749
• CVE-2015-4760
• DEBIAN-DSA-3144
• DEBIAN-DSA-3147
• DEBIAN-DSA-3324
• DISA_SEVERITY-Category I
• DISA_VMSKEY-V0061079
• DISA_VMSKEY-V0061089
• IAVM-2015-A-0153
• IAVM-2015-A-0158
• REDHAT-RHSA-2015:0068
• REDHAT-RHSA-2015:0079
• REDHAT-RHSA-2015:0080
• REDHAT-RHSA-2015:0085
• REDHAT-RHSA-2015:0086
• XF-100148

Solution Reference

Solution

Related Vulnerabilities

• RHSA-2015:1072: openssl security update
• OS X update for Admin Framework (CVE-2015-4000)
• MFSA2015-70 SeaMonkey: NSS accepts export-length DHE keys with regular DHE cipher suites (CVE-2015-4000)
• RHSA-2015:1007: java-1.7.0-ibm security update
• Gentoo Linux: CVE-2015-4760: Oracle JRE/JDK: Multiple vulnerabilities
• IBM AIX: java_july2015_advisory (CVE-2015-4731): Vulnerability in IBM Java SDK affects AIX
• IBM AIX: java_april2015_advisory, rc4_advisory (CVE-2015-2808): Vulnerability in IBM Java SDK affects AIX
• Java CPU July 2015 Java SE 2D vulnerability (CVE-2015-2632)
• IBM AIX: java_july2015_advisory (CVE-2015-4760): Vulnerability in IBM Java SDK affects AIX
• Juniper Junos OS: 2015-05 Out of Cycle Security Bulletin: "Logjam" passive attack on sub-1024 DH groups, and active downgrade attack of TLS to DHE_EXPORT (JSA10681) (CVE-2015-4000)
• SUSE: CVE-2015-4000: SUSE Linux Security Advisory
• Gentoo Linux: CVE-2015-2621: Oracle JRE/JDK: Multiple vulnerabilities
• TLS Server Supports DHE_EXPORT Cipher Algorithms (CVE-2015-4000)
• RHSA-2015:0067: java-1.7.0-openjdk security update
• Java CPU July 2015 Java SE, JRockit, Java SE Embedded JNDI vulnerability (CVE-2015-4749)
• Oracle Solaris 11: CVE-2015-4000: Vulnerability in LFTP, OpenSSL, Thunderbird
• RHSA-2015:1485: java-1.7.1-ibm security update
• IBM AIX: java_july2015_advisory (CVE-2015-4732): Vulnerability in IBM Java SDK affects AIX
• RHSA-2015:1228: java-1.8.0-openjdk security update
• IBM HTTP Server: CVE-2015-2808: Vulnerability in RC4 stream cipher affects IBM HTTP Server and Caching Proxy
• DSA-3324-1 icedove -- security update
• ELSA-2015-1197 Moderate: Oracle Linux openssl security update
• IBM AIX: java_july2015_advisory (CVE-2015-2632): Vulnerability in IBM Java SDK affects AIX
• Gentoo Linux: CVE-2015-4732: Oracle JRE/JDK: Multiple vulnerabilities
• ELSA-2015-1229 Critical: Oracle Linux java-1.7.0-openjdk security update
• Java CPU July 2015 Java SE, JRockit, Java SE Embedded Security vulnerability (CVE-2015-4748)
• MFSA2015-70 Thunderbird: NSS accepts export-length DHE keys with regular DHE cipher suites (CVE-2015-4000)
• Amazon Linux AMI: Security patch for java-1.6.0-openjdk (ALAS-2015-480) (multiple CVEs)
• HP-UX: CVE-2015-0383: Potential security vulnerabilities have been identified in the Java Runtime Environment (JRE) and the Java Developer Kit (JDK) running on HP-UX. These vulnerabilities could allow remote unauthorized access, disclosure of information, and other vulnerabilities.
• HP System Management Homepage - HPSBMU03546 (CVE-2015-4000): Windows and Linux, Multiple Remote Vulnerabilities
• ELSA-2015-0067 Critical: Oracle Linux java-1.7.0-openjdk security update
• Gentoo Linux: CVE-2015-0383: IcedTea: Multiple vulnerabilities
• USN-2696-1: OpenJDK 7 vulnerabilities
• USN-2486-1: OpenJDK 6 vulnerabilities
• IBM AIX: java_july2015_advisory (CVE-2015-4749): Vulnerability in IBM Java SDK affects AIX
• Cent OS: CVE-2015-0383: CESA-2015:0085 (java-1.6.0-openjdk)
• Vulnerabilities deemed not relevant on Red Hat Enterprise Linux 5
• Java CPU July 2015 Java SE, JRockit, Java SE Embedded JSSE vulnerability (CVE-2015-2808)
• Cent OS: CVE-2015-4000: CESA-2015:1526 (java-1.6.0-openjdk)
• Palo Alto Networks (Multiple Advisories) (CVE-2015-4000): OpenSSL Vulnerabilities
• Java CPU July 2015 Java SE, Java SE Embedded JMX vulnerability (CVE-2015-2621)
• SUSE: CVE-2015-0383: SUSE Linux Security Advisory
• ELSA-2015-1526 Important: Oracle Linux java-1.6.0-openjdk security update
• RHSA-2015:1230: java-1.7.0-openjdk security update
• RHSA-2015:0080: java-1.8.0-oracle security update
• ELSA-2015-0069 Important: Oracle Linux java-1.8.0-openjdk security update
• DSA-3147-1 openjdk-6 -- security update
• Vulnerabilities deemed not relevant on Red Hat Enterprise Linux 7
• Gentoo Linux: CVE-2015-4748: Oracle JRE/JDK: Multiple vulnerabilities
• IBM WebSphere Application Server: CVE-2015-2808: IBM Multiple vulnerabilities in IBM® Java SDK affect WebSphere Application Server April 2015 CPU
• Cisco SAN-OS: Multiple Vulnerabilities in OpenSSL (June 2015) Affecting Cisco Products (Multiple CVEs)
• Oracle Solaris 11: CVE-2015-2632: Vulnerability in Localization (L10N)
• IBM AIX: java_july2015_advisory (CVE-2015-2590): Vulnerability in IBM Java SDK affects AIX
• RHSA-2015:1185: nss security update
• USN-2656-2: Firefox vulnerabilities
• HP-UX: CVE-2015-2808: Apache Server Suite running Apache Tomcat or PHP, Remote Denial of Service (DoS) and Other Vulnerabilities
• USN-2706-1: OpenJDK 6 vulnerabilities
• Java CPU July 2015 Java SE, JRockit, Java SE Embedded JSSE vulnerability (CVE-2015-2625)
• RHSA-2015:0086: java-1.6.0-sun security update
• Amazon Linux AMI: Security patch for java-1.8.0-openjdk (ALAS-2015-472) (multiple CVEs)
• FreeBSD: openssl -- multiple vulnerabilities (FreeBSD-SA-15:10.openssl) (Multiple CVEs)
• HP iLO: CVE-2015-4000: Remote Disclosure of Information, Unauthorized Modification aka Logjam
• ELSA-2015-1230 Important: Oracle Linux java-1.7.0-openjdk security update
• Java CPU July 2015 Java SE, JRockit, Java SE Embedded JCE vulnerability (CVE-2015-2601)
• DSA-3323-1 icu -- security update
• ELSA-2015-0085 Important: Oracle Linux java-1.6.0-openjdk security update
• RHSA-2015:0079: java-1.7.0-oracle security update
• Java CPU July 2015 Java SE, Java SE Embedded Security vulnerability (CVE-2015-2659)
• Gentoo Linux: CVE-2015-4731: Oracle JRE/JDK: Multiple vulnerabilities
• USN-2740-1: ICU vulnerabilities
• RHSA-2015:1604: Red Hat Satellite IBM Java Runtime security update
• IBM WebSphere Application Server: CVE-2015-4000: IBM Vulnerability with Diffie-Hellman ciphers may affect IBM WebSphere Application Server (CVE-2015-4000)
• DSA-3144-1 openjdk-7 -- security update
• RHSA-2015:0068: java-1.7.0-openjdk security update
• RHSA-2015:1243: java-1.6.0-sun security update
• MFSA2015-70 Firefox: NSS accepts export-length DHE keys with regular DHE cipher suites (CVE-2015-4000)
• DSA-3316-1 openjdk-7 -- security update
• Gentoo Linux: CVE-2015-4749: IcedTea: Multiple vulnerabilities
• Gentoo Linux: CVE-2015-2590: Oracle JRE/JDK: Multiple vulnerabilities
• HP-UX: CVE-2015-4000: OpenSSL Vulnerability (DHE man-in-the-middle protection (Logjam))
• Java CPU July 2015 Java SE, JRockit, Java SE Embedded JSSE vulnerability (CVE-2015-4000)
• ELSA-2015-0068 Important: Oracle Linux java-1.7.0-openjdk security update
• RHSA-2015:1006: java-1.6.0-ibm security update
• IBM AIX: java_july2015_advisory, openssl_advisory14, openssl_advisory17, sendmail_advisory2 (CVE-2015-4000): Vulnerability in IBM Java SDK affects AIX
• RHSA-2015:1020: java-1.7.1-ibm security update
• RHSA-2015:1197: openssl security update
• Gentoo Linux: CVE-2015-2659: Oracle JRE/JDK: Multiple vulnerabilities
• Oracle Solaris 11: CVE-2015-4760: Vulnerability in Localization (L10N)
• Java CPU July 2015 Java SE, Java SE Embedded Libraries vulnerability (CVE-2015-2590)
• RHSA-2015:0085: java-1.6.0-openjdk security update
• IBM AIX: java_july2015_advisory (CVE-2015-2621): Vulnerability in IBM Java SDK affects AIX
• RHSA-2015:1488: java-1.7.0-ibm security update
• Gentoo Linux: CVE-2015-2632: ICU: Multiple vulnerabilities
• Java CPU July 2015 Java SE, Java SE Embedded JMX vulnerability (CVE-2015-4731)
• DSA-3339-1 openjdk-6 -- security update
• DSA-3287-1 openssl -- security update
• USN-2673-1: Thunderbird vulnerabilities
• Java CPU July 2015 Java SE, Java SE Embedded RMI vulnerability (CVE-2015-4733)
• FreeBSD: mozilla -- multiple vulnerabilities (Multiple CVEs)
• Oracle Solaris 11: CVE-2015-2808: Vulnerability in OpenSSL