HP-UX: CVE-2013-5817: Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 10 | (AV:N/AC:L/Au:N/C:C/I:C/A:C) | October 16, 2013 | August 11, 2017 | January 08, 2018 |
Description
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JNDI.
Free Nexpose Download
Discover, prioritize, and remediate security risks today!
References
- APPLE-APPLE-SA-2013-10-15-1
- BID-63146
- CVE-2013-5817
- DISA_SEVERITY-Category I
- DISA_VMSKEY-V0040779
- IAVM-2013-A-0191
- OVAL-OVAL19024
- REDHAT-RHSA-2013:1440
- REDHAT-RHSA-2013:1447
- REDHAT-RHSA-2013:1451
- REDHAT-RHSA-2013:1505
- REDHAT-RHSA-2013:1507
- REDHAT-RHSA-2013:1508
- REDHAT-RHSA-2013:1509
- REDHAT-RHSA-2013:1793
- REDHAT-RHSA-2014:0414
Solution
hpux-update-jdk70-jdk70-comRelated Vulnerabilities
- Cent OS: CVE-2013-5817: CESA-2013:1505 (java-1.6.0-openjdk)
- RHSA-2013:1440: java-1.7.0-oracle security update
- ELSA-2013-1447 Important: Oracle Linux java-1.7.0-openjdk security update
- Java CPU October 2013 Java SE, Java SE Embedded JNDI vulnerability (CVE-2013-5817)
- USN-2033-1: OpenJDK 6 vulnerabilities
- RHSA-2013:1793: Red Hat Network Satellite server IBM Java Runtime security update
- Apple Java security update for CVE-2013-5817
- Amazon Linux AMI: Security patch for java-1.6.0-openjdk (ALAS-2013-246) (multiple CVEs)
- RHSA-2013:1451: java-1.7.0-openjdk security update
- Amazon Linux AMI: Security patch for java-1.7.0-openjdk (ALAS-2013-235) (multiple CVEs)
- RHSA-2013:1447: java-1.7.0-openjdk security update
- RHSA-2013:1508: java-1.6.0-ibm security update
- RHSA-2013:1509: java-1.5.0-ibm security update
- Gentoo Linux: CVE-2013-5817: Oracle JRE/JDK: Multiple vulnerabilities
- RHSA-2013:1507: java-1.7.0-ibm security update
- ELSA-2013-1505 Important: Oracle Linux java-1.6.0-openjdk security update
- RHSA-2014:0414: java-1.6.0-sun security update
- USN-2089-1: OpenJDK 7 vulnerabilities
- IBM AIX: java_advisory (CVE-2013-5817): Vulnerability in IBM Java SDK affects AIX
- SUSE Linux Security Vulnerability: CVE-2013-5817
- ELSA-2013-1451 Critical: Oracle Linux java-1.7.0-openjdk security update
- RHSA-2013:1505: java-1.6.0-openjdk security update