CVE-2014-6558: Low severity oracle java se vulnerability

Published Oct 15, 2014

Updated

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and JRockit R28.3.3 allows remote attackers to affect integrity via unknown vectors related to Security.

Affected Software

10 affected components

ORACLE Jrockit=r27.8.3

ORACLE Jrockit=r28.3.3

Oracle JDK=1.5.0-update_71

Oracle JDK=1.6.0-update81

Oracle JDK=1.7.0-update60

ORACLE JRE=1.5.0-update_71

ORACLE JRE=1.6.0-update_81

ORACLE JRE=1.7.0-update_67

ORACLE JRE=1.7.0-update60

ORACLE JRE=1.8.0-update_20

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html

Event History

Oct 15, 2014

CVE Published

via MITRE·10:03 PM

Data Sourced

via MITRE·10:03 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-6558?

The severity of CVE-2014-6558 is moderately critical as it allows remote attackers to affect the integrity of affected systems.

How do I fix CVE-2014-6558?

To fix CVE-2014-6558, update to the latest version of Oracle Java or JRockit that addresses this vulnerability.

Which versions are affected by CVE-2014-6558?

CVE-2014-6558 affects Oracle Java SE 5.0u71, 6u81, 7u67, 8u20, Java SE Embedded 7u60, and specific JRockit versions.

What impact does CVE-2014-6558 have on systems?

CVE-2014-6558 allows remote attackers to potentially compromise the integrity of applications running on affected systems.

Is there a workaround for CVE-2014-6558?

While the best mitigation for CVE-2014-6558 is updating the software, disabling the vulnerable Java components may act as a temporary workaround.