CVE-2014-0432: Critical severity Oracle JDK vulnerability
Oracle Java SE 7u55 and 8u5 fixes an unspecified vulnerability in the Libraries component (CVE-2014-0432). Upstream has CVSSv2 scored this issue as: 9.3/AV:N/AC:M/Au:N/C:C/I:C/A:C
External Reference:
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA
Other sources
Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0455 and CVE-2014-2402.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/javato a version that resolves this vulnerability.Fixed in 1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10 - Upgrade
Upgrade
redhat/javato a version that resolves this vulnerability.Fixed in 1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5 - Upgrade
Upgrade
Oracle Java SE (7u55, 8u5)to a version that resolves this vulnerability.Fixed in 7u55 - Upgrade
Upgrade
Oracle Java SE 8u5to a version that resolves this vulnerability.Fixed in 8u5
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2014-0432?
CVE-2014-0432 has a CVSSv2 score of 9.3, indicating a critical vulnerability.
What versions of Java are affected by CVE-2014-0432?
CVE-2014-0432 affects Oracle Java SE versions 7u55, 8u5, and earlier updates.
How do I fix CVE-2014-0432?
To fix CVE-2014-0432, upgrade to Oracle Java SE 7u55 or 8u5 or later versions.
What component is vulnerable in CVE-2014-0432?
CVE-2014-0432 contains vulnerabilities in the Libraries component of Oracle Java.
Can CVE-2014-0432 be exploited remotely?
Yes, CVE-2014-0432 can potentially be exploited remotely, making it critical to address.