CVE-2014-4264: Medium severity Oracle JDK vulnerability
It was discovered that the Security component did not properly handle data related to TLS and elliptic curves. An unauthenticated remote attacker could exploit this to impact the availability of the Java Virtual Machine.
Other sources
Unspecified vulnerability in Oracle Java SE 7u60 and 8u5 allows remote attackers to affect availability via unknown vectors related to Security.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-4264?
CVE-2014-4264 has a high severity level as it allows unauthenticated remote attackers to potentially impact the availability of the Java Virtual Machine.
How do I fix CVE-2014-4264?
To fix CVE-2014-4264, you should upgrade to a patched version of Oracle JDK or JRE, specifically versions beyond 1.7.0-update60 and 1.8.0-update5.
Which software is affected by CVE-2014-4264?
CVE-2014-4264 affects Oracle JDK 1.7.0-update60, Oracle JDK 1.8.0-update5, and their corresponding JRE versions.
What types of attacks are possible with CVE-2014-4264?
CVE-2014-4264 can be exploited by remote attackers to disrupt the availability of services running on the affected Java Virtual Machine.
Is CVE-2014-4264 related to TLS and elliptic curves?
Yes, CVE-2014-4264 is related to improper handling of data concerning TLS and elliptic curves within the Oracle Java security component.