CVE-2013-5848: Medium severity oracle java se 7 vulnerability

Q: What is the severity of CVE-2013-5848?

CVE-2013-5848 has a CVSSv2 score of 5.0, indicating moderate severity.

Q: What components are affected by CVE-2013-5848?

The vulnerability affects the Deployment component of Oracle Java SE.

Q: How can I fix CVE-2013-5848?

To fix CVE-2013-5848, update to Oracle Java SE Update 45 or the equivalent patched version from your vendor.

Q: Which Java versions are vulnerable to CVE-2013-5848?

CVE-2013-5848 affects multiple versions of Oracle and IBM Java, including 1.6.0 and 1.7.0 prior to their latest updates.

Q: Is CVE-2013-5848 related to any specific software packages?

Yes, CVE-2013-5848 impacts specific Red Hat Java packages that include affected versions of Oracle and IBM Java.

Published Oct 15, 2013

Updated

Oracle Java SE Update 45 fixes an unspecified vulnerability in the Deployment component (CVE-2013-5848). Upstream has CVSSv2 scored this issue as: 5.0/AV:N/AC:L/Au:N/C:N/I:P/A:N

External Reference:

http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html

Other sources

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and JavaFX 2.2.40 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment.

Affected Software

54 affected componentsFixes available

redhat/java<1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10

1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10

redhat/java<1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5

1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5

redhat/java<1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6

1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6

redhat/java<1.7.0-oracle-1:1.7.0.45-1jpp.1.el5_10

1.7.0-oracle-1:1.7.0.45-1jpp.1.el5_10

redhat/java<1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el5_10

1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el5_10

redhat/java<1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el5_10

1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el5_10

redhat/java<1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4

1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4

redhat/java<1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4

1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4

redhat/java<1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4

1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4

Oracle JDK<=1.7.0

Oracle JDK=1.7.0

Oracle JDK=1.7.0-update1

Oracle JDK=1.7.0-update10

Oracle JDK=1.7.0-update11

Oracle JDK=1.7.0-update13

Oracle JDK=1.7.0-update15

Oracle JDK=1.7.0-update17

Oracle JDK=1.7.0-update2

Oracle JDK=1.7.0-update21

Oracle JDK=1.7.0-update25

Oracle JDK=1.7.0-update3

Oracle JDK=1.7.0-update4

Oracle JDK=1.7.0-update5

Oracle JDK=1.7.0-update6

Oracle JDK=1.7.0-update7

Oracle JDK=1.7.0-update9

ORACLE JRE<=1.7.0

ORACLE JRE=1.7.0

ORACLE JRE=1.7.0-update1

ORACLE JRE=1.7.0-update10

ORACLE JRE=1.7.0-update11

ORACLE JRE=1.7.0-update13

ORACLE JRE=1.7.0-update15

ORACLE JRE=1.7.0-update17

ORACLE JRE=1.7.0-update2

ORACLE JRE=1.7.0-update21

ORACLE JRE=1.7.0-update25

ORACLE JRE=1.7.0-update3

ORACLE JRE=1.7.0-update4

ORACLE JRE=1.7.0-update5

ORACLE JRE=1.7.0-update6

ORACLE JRE=1.7.0-update7

ORACLE JRE=1.7.0-update9

ORACLE JavaFX<=2.2.40

ORACLE JavaFX=2.0

ORACLE JavaFX=2.0.2

ORACLE JavaFX=2.0.3

ORACLE JavaFX=2.1

ORACLE JavaFX=2.2

ORACLE JavaFX=2.2.3

ORACLE JavaFX=2.2.4

ORACLE JavaFX=2.2.5

ORACLE JavaFX=2.2.7

ORACLE JavaFX=2.2.21

Event History

Oct 15, 2013

CVE Published

12:00 AM

Oct 16, 2013

Data Sourced

via Red Hat·09:39 AM

DescriptionSeverityAffected Software

CVE Published

via MITRE·05:31 PM

Data Sourced

via MITRE·05:31 PM

Description

Parent advisories

This vulnerability appears in the following advisories.

Frequently Asked Questions

What is the severity of CVE-2013-5848?

CVE-2013-5848 has a CVSSv2 score of 5.0, indicating moderate severity.

What components are affected by CVE-2013-5848?

The vulnerability affects the Deployment component of Oracle Java SE.

How can I fix CVE-2013-5848?