CVE-2013-5904
First published: Wed Jan 15 2014(Updated: )
Unspecified vulnerability in Oracle Java SE 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Java Runtime Environment (JRE) | =1.7.0-update45 | |
| redhat enterprise linux desktop supplementary | =5.0 | |
| redhat enterprise linux desktop supplementary | =6.0 | |
| Red Hat Enterprise Linux HPC Node Supplementary | =6.0 | |
| Red Hat Enterprise Linux Server Supplementary | =5.0 | |
| Red Hat Enterprise Linux Server Supplementary | =6.0 | |
| Red Hat Enterprise Linux Server Supplementary AUS | =6.5 | |
| Red Hat Enterprise Linux Server Supplementary EUS | =6.5.z | |
| Red Hat Enterprise Linux Workstation Supplementary | =6.0 | |
| HP JDK | <=7.0.08 | |
| HP JRE | <=7.0.08 | |
| HPE HP-UX | =b.11.23 | |
| HPE HP-UX | =b.11.31 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://marc.info/?l=bugtraq&m=139402697611681&w=2
- http://osvdb.org/101993
- http://rhn.redhat.com/errata/RHSA-2014-0030.html
- http://secunia.com/advisories/56485
- http://secunia.com/advisories/56535
- http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
- http://www.securityfocus.com/bid/64758
- http://www.securityfocus.com/bid/64890
- http://www.securitytracker.com/id/1029608
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90336
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777
Frequently Asked Questions
What is the severity of CVE-2013-5904?
CVE-2013-5904 has a severity rating that could potentially allow remote attackers to affect the confidentiality, integrity, and availability of the system.
How do I fix CVE-2013-5904?
To fix CVE-2013-5904, update your Oracle Java SE to a version later than 7u45 or apply the relevant patches provided by your software vendor.
Which software is affected by CVE-2013-5904?
CVE-2013-5904 affects Oracle Java Runtime Environment 1.7.0-update45 and specific versions of Red Hat Enterprise Linux.
Can CVE-2013-5904 be exploited remotely?
Yes, CVE-2013-5904 can be exploited remotely by attackers through unspecified vectors related to deployment.
Is CVE-2013-5904 still a threat?
Although CVE-2013-5904 was disclosed in 2013, it may still pose a threat to systems that have not been updated or patched.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/last-modified-date
- agent/severity
- agent/references
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/oracle
- canonical/oracle java runtime environment (jre)
- version/oracle java runtime environment (jre)/1.7.0-update45
- vendor/redhat
- canonical/redhat enterprise linux desktop supplementary
- version/redhat enterprise linux desktop supplementary/5.0
- version/redhat enterprise linux desktop supplementary/6.0
- canonical/red hat enterprise linux hpc node supplementary
- version/red hat enterprise linux hpc node supplementary/6.0
- canonical/red hat enterprise linux server supplementary
- version/red hat enterprise linux server supplementary/5.0
- version/red hat enterprise linux server supplementary/6.0
- canonical/red hat enterprise linux server supplementary aus
- version/red hat enterprise linux server supplementary aus/6.5
- canonical/red hat enterprise linux server supplementary eus
- version/red hat enterprise linux server supplementary eus/6.5.z
- canonical/red hat enterprise linux workstation supplementary
- version/red hat enterprise linux workstation supplementary/6.0
- vendor/hp
- canonical/hp jdk
- version/hp jdk/7.0.08
- canonical/hp jre
- version/hp jre/7.0.08
- canonical/hpe hp-ux
- version/hpe hp-ux/b.11.23
- version/hpe hp-ux/b.11.31