CVE-2013-5776: Medium severity oracle java se 7 vulnerability

Q: What is the severity of CVE-2013-5776?

CVE-2013-5776 has a CVSSv2 score of 5.0, indicating medium severity.

Q: How do I fix CVE-2013-5776?

To fix CVE-2013-5776, upgrade to Java versions 1.6.0-update45 or later, or 1.7.0-update45 or later.

Q: Which software is affected by CVE-2013-5776?

CVE-2013-5776 affects various versions of Oracle Java SE and the Java Runtime Environment (JRE).

Q: What types of vulnerabilities does CVE-2013-5776 address?

CVE-2013-5776 addresses an unspecified vulnerability in the Deployment component of Oracle Java SE.

Q: Is CVE-2013-5776 still a concern for current users?

Yes, if you are using vulnerable versions of Oracle Java SE or JRE, you should ensure you have applied the necessary updates.

Published Oct 15, 2013

Updated

Oracle Java SE Update 45 fixes an unspecified vulnerability in the Deployment component (CVE-2013-5776). Upstream has CVSSv2 scored this issue as: 5.0/AV:N/AC:L/Au:N/C:N/I:P/A:N

External Reference:

http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html

Other sources

Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment.

Affected Software

127 affected componentsFixes available

redhat/java<1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10

1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10

redhat/java<1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5

1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5

redhat/java<1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6

1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6

redhat/java<1.7.0-oracle-1:1.7.0.45-1jpp.1.el5_10

1.7.0-oracle-1:1.7.0.45-1jpp.1.el5_10

redhat/java<1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el5_10

1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el5_10

redhat/java<1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el5_10

1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el5_10

redhat/java<1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4

1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4

redhat/java<1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4

1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4

redhat/java<1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4

1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4

Oracle JDK<=1.7.0

Oracle JDK=1.7.0

Oracle JDK=1.7.0-update1

Oracle JDK=1.7.0-update10

Oracle JDK=1.7.0-update11

Oracle JDK=1.7.0-update13

Oracle JDK=1.7.0-update15

Oracle JDK=1.7.0-update17

Oracle JDK=1.7.0-update2

Oracle JDK=1.7.0-update21

Oracle JDK=1.7.0-update25

Oracle JDK=1.7.0-update3

Oracle JDK=1.7.0-update4

Oracle JDK=1.7.0-update5

Oracle JDK=1.7.0-update6

Oracle JDK=1.7.0-update7

Oracle JDK=1.7.0-update9

ORACLE JRE<=1.7.0

ORACLE JRE=1.7.0

ORACLE JRE=1.7.0-update1

ORACLE JRE=1.7.0-update10

ORACLE JRE=1.7.0-update11

ORACLE JRE=1.7.0-update13

ORACLE JRE=1.7.0-update15

ORACLE JRE=1.7.0-update17

ORACLE JRE=1.7.0-update2

ORACLE JRE=1.7.0-update21

ORACLE JRE=1.7.0-update25

ORACLE JRE=1.7.0-update3

ORACLE JRE=1.7.0-update4

ORACLE JRE=1.7.0-update5

ORACLE JRE=1.7.0-update6

ORACLE JRE=1.7.0-update7

ORACLE JRE=1.7.0-update9

Oracle JDK<=1.6.0

Oracle JDK=1.6.0-update22

Oracle JDK=1.6.0-update23

Oracle JDK=1.6.0-update24

Oracle JDK=1.6.0-update25

Oracle JDK=1.6.0-update26

Oracle JDK=1.6.0-update27

Oracle JDK=1.6.0-update29

Oracle JDK=1.6.0-update30

Oracle JDK=1.6.0-update31

Oracle JDK=1.6.0-update32

Oracle JDK=1.6.0-update33

Oracle JDK=1.6.0-update34

Oracle JDK=1.6.0-update35

Oracle JDK=1.6.0-update37

Oracle JDK=1.6.0-update38

Oracle JDK=1.6.0-update39

Oracle JDK=1.6.0-update41

Oracle JDK=1.6.0-update43

Oracle JDK=1.6.0-update45

Oracle JDK=1.6.0-update51

Sun JDK=1.6.0

Sun JDK=1.6.0-update_10

Sun JDK=1.6.0-update_11

Sun JDK=1.6.0-update_12

Sun JDK=1.6.0-update_13

Sun JDK=1.6.0-update_14

Sun JDK=1.6.0-update_15

Sun JDK=1.6.0-update_16

Sun JDK=1.6.0-update_17

Sun JDK=1.6.0-update_18

Sun JDK=1.6.0-update_19

Sun JDK=1.6.0-update_20

Sun JDK=1.6.0-update_21

Sun JDK=1.6.0-update_3

Sun JDK=1.6.0-update_4

Sun JDK=1.6.0-update_5

Sun JDK=1.6.0-update_6

Sun JDK=1.6.0-update_7

Sun JDK=1.6.0-update1

Sun JDK=1.6.0-update1_b06

Sun JDK=1.6.0-update2

ORACLE JRE<=1.6.0

ORACLE JRE=1.6.0-update22

ORACLE JRE=1.6.0-update23

ORACLE JRE=1.6.0-update24

ORACLE JRE=1.6.0-update25

ORACLE JRE=1.6.0-update26

ORACLE JRE=1.6.0-update27

ORACLE JRE=1.6.0-update29

ORACLE JRE=1.6.0-update30

ORACLE JRE=1.6.0-update31

ORACLE JRE=1.6.0-update32

ORACLE JRE=1.6.0-update33

ORACLE JRE=1.6.0-update34

ORACLE JRE=1.6.0-update35

ORACLE JRE=1.6.0-update37

ORACLE JRE=1.6.0-update38

ORACLE JRE=1.6.0-update39

ORACLE JRE=1.6.0-update41

ORACLE JRE=1.6.0-update43

ORACLE JRE=1.6.0-update45

ORACLE JRE=1.6.0-update51

Sun JRE=1.6.0

Sun JRE=1.6.0-update_1

Sun JRE=1.6.0-update_10

Sun JRE=1.6.0-update_11

Sun JRE=1.6.0-update_12

Sun JRE=1.6.0-update_13

Sun JRE=1.6.0-update_14

Sun JRE=1.6.0-update_15

Sun JRE=1.6.0-update_16

Sun JRE=1.6.0-update_17

Sun JRE=1.6.0-update_18

Sun JRE=1.6.0-update_19

Sun JRE=1.6.0-update_2

Sun JRE=1.6.0-update_20

Sun JRE=1.6.0-update_21

Sun JRE=1.6.0-update_3

Sun JRE=1.6.0-update_4

Sun JRE=1.6.0-update_5

Sun JRE=1.6.0-update_6

Sun JRE=1.6.0-update_7

Sun JRE=1.6.0-update_9

Event History

Oct 15, 2013

CVE Published

12:00 AM

Oct 16, 2013

Data Sourced

via Red Hat·09:30 AM

DescriptionSeverityAffected Software

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Parent advisories

This vulnerability appears in the following advisories.

Frequently Asked Questions

What is the severity of CVE-2013-5776?

CVE-2013-5776 has a CVSSv2 score of 5.0, indicating medium severity.

How do I fix CVE-2013-5776?

To fix CVE-2013-5776, upgrade to Java versions 1.6.0-update45 or later, or 1.7.0-update45 or later.

Which software is affected by CVE-2013-5776?