The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect integrity via vectors related to JAAS. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to how principals are set for the Subject class, which allows attackers to escape the sandbox using deserialization of a crafted Subject instance.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade java-1.6.0-openjdk-develUpgrade java-1.6.0-openjdk-demoUpgrade java-1.6.0-openjdk-javadocUpgrade java-1.7.0-openjdk-javadocUpgrade java-1.7.0-openjdkUpgrade java-1.6.0-openjdkUpgrade java-1.7.0-openjdk-srcUpgrade java-1.6.0-openjdk-srcUpgrade java-1.7.0-openjdk-develUpgrade java-1.7.0-openjdk-demo | Dec 1, 2016 | Jan 15, 2014 |
| Gentoo Linux | — | Upgrade dev-java/oracle-jre-bin.Upgrade app-emulation/emul-linux-x86-java.Upgrade dev-java/sun-jre-bin.Upgrade dev-java/sun-jdk.Upgrade dev-java/oracle-jdk-bin. | Oct 30, 2017 | Jan 15, 2014 |
| Hpux | — | Update Jdk70.JDK70-IPF64 to the latest versionUpdate Jre70.JRE70-IPF32 to the latest versionUpdate Jre70.JRE70-IPF32-HS to the latest versionUpdate Jre70.JRE70-COM to the latest versionUpdate Jdk70.JDK70-IPF32 to the latest versionUpdate Jdk70.JDK70-DEMO to the latest versionUpdate Jre70.JRE70-IPF64-HS to the latest versionUpdate Jdk70.JDK70-COM to the latest versionUpdate Jre70.JRE70-IPF64 to the latest version | Aug 11, 2017 | Jan 15, 2014 |
| Ibm Aix | — | Apply the fix or workaround for java_jan2014_advisory | Nov 30, 2017 | Jan 15, 2014 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Jan 14, 2014 | Jan 14, 2014 |
| Oracle_linux | — | Upgrade java-1.7.0-openjdk-javadocUpgrade java-1.6.0-openjdk-demoUpgrade java-1.7.0-openjdk-srcUpgrade java-1.6.0-openjdk-srcUpgrade java-1.6.0-openjdk-develUpgrade java-1.6.0-openjdkUpgrade java-1.6.0-openjdk-javadocUpgrade java-1.7.0-openjdkUpgrade java-1.7.0-openjdk-demoUpgrade java-1.7.0-openjdk-devel | Oct 16, 2024 | Jan 15, 2014 |
| Suse | — | Upgrade java-1_7_0-openjdk-demoUpgrade java-1_6_0-ibm-alsaUpgrade java-1_7_0-ibmUpgrade java-1_7_0-openjdkUpgrade java-1_7_0-ibm-pluginUpgrade java-1_7_0-openjdk-develUpgrade java-1_7_0-ibm-develUpgrade java-1_7_0-ibm-alsaUpgrade java-1_7_0-openjdk-headlessUpgrade java-1_6_0-ibm-pluginUpgrade java-1_6_0-ibm-fontsUpgrade java-1_6_0-ibm-develUpgrade java-1_6_0-ibm-jdbcUpgrade java-1_6_0-ibmUpgrade java-1_7_0-ibm-jdbc | Dec 18, 2015 | Jan 15, 2014 |
| Ubuntu | — | Upgrade openjdk-6-jre-zeroUpgrade icedtea-6-jre-jamvmUpgrade openjdk-7-jre-libUpgrade openjdk-7-jreUpgrade openjdk-6-jreUpgrade openjdk-7-jre-zeroUpgrade openjdk-6-jre-headlessUpgrade icedtea-7-jre-jamvmUpgrade openjdk-6-jre-libUpgrade openjdk-7-jre-headlessUpgrade icedtea-6-jre-cacaoUpgrade icedtea-7-jre-cacao | Nov 8, 2024 | Jan 15, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub