CVE-2013-3006
First published: Fri Jul 12 2013(Updated: )
The July 2013 updates for the IBM JDK (5.0 SR16-FP3, 6 SR14, 6.0.1 SR6, 7 SR5) contain patches for unspecified security flaws. For the majority of the flaws, upstream has provided a CVSSv2 base score of 9.3, which suggests a CVSSv2 vector of AV:N/AC:M/Au:N/C:P/I:P/A:P. The exception is <a href="https://access.redhat.com/security/cve/CVE-2013-4002">CVE-2013-4002</a> with a CVSSv2 base score of 7.1. CVE CVSSv2 Score Fixed in <a href="https://access.redhat.com/security/cve/CVE-2013-3006">CVE-2013-3006</a> 9.3 7 SR5 <a href="https://access.redhat.com/security/cve/CVE-2013-3007">CVE-2013-3007</a> 9.3 6.0.1 SR6, 7 SR5 <a href="https://access.redhat.com/security/cve/CVE-2013-3008">CVE-2013-3008</a> 9.3 7 SR5 <a href="https://access.redhat.com/security/cve/CVE-2013-3009">CVE-2013-3009</a> 9.3 5.0 SR16-FP3, 6 SR14, 6.0.1 SR6, 7 SR5 <a href="https://access.redhat.com/security/cve/CVE-2013-3010">CVE-2013-3010</a> 9.3 6.0.1 SR6, 7 SR5 <a href="https://access.redhat.com/security/cve/CVE-2013-3011">CVE-2013-3011</a> 9.3 5.0 SR16-FP3, 6 SR14, 6.0.1 SR6, 7 SR5 <a href="https://access.redhat.com/security/cve/CVE-2013-3012">CVE-2013-3012</a> 9.3 5.0 SR16-FP3, 6 SR14, 6.0.1 SR6, 7 SR5 <a href="https://access.redhat.com/security/cve/CVE-2013-4002">CVE-2013-4002</a> 7.1 5.0 SR16-FP3, 6 SR14, 6.0.1 SR6, 7 SR5 References: <a href="https://www.ibm.com/developerworks/java/jdk/alerts/">https://www.ibm.com/developerworks/java/jdk/alerts/</a> <a href="http://www.ibm.com/developerworks/java/jdk/aix/j764/Java7_64.fixes.html#SR5">http://www.ibm.com/developerworks/java/jdk/aix/j764/Java7_64.fixes.html#SR5</a> <a href="http://www.ibm.com/developerworks/java/jdk/aix/j664/Java6_64.fixes.html#SR14">http://www.ibm.com/developerworks/java/jdk/aix/j664/Java6_64.fixes.html#SR14</a> <a href="http://www.ibm.com/developerworks/java/jdk/aix/j564/fixes.html#SR16FP3">http://www.ibm.com/developerworks/java/jdk/aix/j564/fixes.html#SR16FP3</a>
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/java | <1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el5_9 | 1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el5_9 |
| redhat/java | <1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4 | 1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4 |
| IBM JDK | =7.0.0.0 | |
| IBM JDK | =7.0.1.0 | |
| IBM JDK | =7.0.2.0 | |
| IBM JDK | =7.0.3.0 | |
| IBM JDK | =7.0.4.0 | |
| IBM JDK | =7.0.4.1 | |
| IBM JDK | =7.0.4.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://access.redhat.com/security/cve/CVE-2013-4002
- https://access.redhat.com/security/cve/CVE-2013-3006
- https://access.redhat.com/security/cve/CVE-2013-3007
- https://access.redhat.com/security/cve/CVE-2013-3008
- https://access.redhat.com/security/cve/CVE-2013-3009
- https://access.redhat.com/security/cve/CVE-2013-3010
- https://access.redhat.com/security/cve/CVE-2013-3011
- https://access.redhat.com/security/cve/CVE-2013-3012
- https://www.ibm.com/developerworks/java/jdk/alerts/
- http://www.ibm.com/developerworks/java/jdk/aix/j764/Java7_64.fixes.html#SR5
- http://www.ibm.com/developerworks/java/jdk/aix/j664/Java6_64.fixes.html#SR14
- http://www.ibm.com/developerworks/java/jdk/aix/j564/fixes.html#SR16FP3
- https://rhn.redhat.com/errata/RHSA-2013-1081.html
- https://rhn.redhat.com/errata/RHSA-2013-1059.html
- https://rhn.redhat.com/errata/RHSA-2013-1060.html
- http://seclists.org/fulldisclosure/2013/Jul/172
- http://www.security-explorations.com/materials/SE-2012-01-IBM-2.pdf
- http://www.security-explorations.com/materials/se-2012-01-62-68.zip
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=985501#c2
- http://seclists.org/fulldisclosure/2016/Apr/20
- https://bugzilla.redhat.com/show_bug.cgi?id=985501
- https://www.cve.org/CVERecord?id=CVE-2013-3006 https://nvd.nist.gov/vuln/detail/CVE-2013-3006
- https://access.redhat.com/errata/RHSA-2013:1060
- http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html
- http://rhn.redhat.com/errata/RHSA-2013-1060.html
- http://secunia.com/advisories/54154
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV44790
- http://www-01.ibm.com/support/docview.wss?uid=swg21642336
- http://www-01.ibm.com/support/docview.wss?uid=swg21644197
- http://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_July_2013
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84147
- collector/redhat-bugzilla
- alias/CVE-2013-3006
- collector/redhat-cve
- agent/event
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- agent/severity
- agent/last-modified-date
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/author
- agent/references
- agent/description
- package-manager/redhat
- vendor/ibm
- canonical/ibm jdk
- version/ibm jdk/7.0.0.0
- version/ibm jdk/7.0.1.0
- version/ibm jdk/7.0.2.0
- version/ibm jdk/7.0.3.0
- version/ibm jdk/7.0.4.0
- version/ibm jdk/7.0.4.1
- version/ibm jdk/7.0.4.2