CVE-2014-0429: Critical severity Canonical Ubuntu Linux vulnerability
It was discovered that certain medialib operations do not properly validate that mlib and raster images correspond to each other. A remote attacker could possibly use this flaw to trigger a Java Virtual Machine memory corruption.
Other sources
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/icedteato a version that resolves this vulnerability.Fixed in 1.13.3 - Upgrade
Upgrade
redhat/icedteato a version that resolves this vulnerability.Fixed in 2.4.7
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0429?
CVE-2014-0429 is classified as a high severity vulnerability due to its potential to cause memory corruption in the Java Virtual Machine.
How do I fix CVE-2014-0429?
To fix CVE-2014-0429, upgrade to the appropriate patched version of Java or IcedTea as specified in the vendor advisories.
Which software versions are affected by CVE-2014-0429?
CVE-2014-0429 affects multiple versions of Oracle Java SE, IcedTea, and other products including specific versions of Ubuntu and Debian.
Can CVE-2014-0429 be exploited remotely?
Yes, CVE-2014-0429 can be exploited remotely by an attacker to trigger memory corruption.
What types of systems are at risk from CVE-2014-0429?
Systems running unpatched versions of Oracle JDK, JRE, and IcedTea are at risk from CVE-2014-0429.