CVE-2014-4227: Critical severity Oracle JDK vulnerability

Published Jul 15, 2014

Updated

Oracle Java SE 6u81, 7u65 and 8u11 fixes an unspecified vulnerability in the Deployment component (CVE-2014-4227). Upstream has CVSSv2 scored this issue as: 10.0/AV:N/AC:L/Au:N/C:C/I:C/A:C

External Reference:

http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html#AppendixJAVA

Other sources

Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

Affected Software

6 affected components

Oracle JDK=1.6.0-update75

Oracle JDK=1.7.0-update60

Oracle JDK=1.8.0-update5

ORACLE JRE=1.6.0-update75

ORACLE JRE=1.7.0-update60

ORACLE JRE=1.8.0-update5

Event History

Jul 15, 2014

Data Sourced

via Red Hat·08:19 PM

DescriptionSeverityAffected Software

Jul 17, 2014

CVE Published

via MITRE·02:36 AM

Data Sourced

via MITRE·02:36 AM

Description

Frequently Asked Questions

What is the severity of CVE-2014-4227?

CVE-2014-4227 is rated with a CVSSv2 score of 10.0, indicating a critical severity level.

Which versions are affected by CVE-2014-4227?

CVE-2014-4227 affects Oracle Java SE versions 6u81, 7u65, and 8u11, among others.

How do I fix CVE-2014-4227?

To address CVE-2014-4227, it is recommended to update to the latest patched versions of Oracle JDK and JRE.

What type of vulnerability is CVE-2014-4227?

CVE-2014-4227 is an unspecified vulnerability in the Deployment component of Oracle Java.

What are the potential impacts of CVE-2014-4227?

Exploitation of CVE-2014-4227 could lead to unauthorized access and potential compromise of system confidentiality, integrity, and availability.