CVE-2014-6601: Critical severity ubuntu vulnerability
Published Jan 21, 2015
·Updated
Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
Affected Software
18 affected components
Canonical Ubuntu Linux=10.04
Canonical Ubuntu Linux=12.04
Canonical Ubuntu Linux=14.04
Canonical Ubuntu Linux=14.10
Debian Debian Linux=7.0
Debian Debian Linux=8.0
Novell Suse Linux Enterprise Desktop=11.0-sp3
Novell Suse Linux Enterprise Server=12.0
openSUSE openSUSE=13.2
redhat Enterprise Linux=5.0
redhat Enterprise Linux=6.0
redhat Enterprise Linux=7.0
Oracle JDK=1.6.0-update85
Oracle JDK=1.7.0-update72
Oracle JDK=1.8.0-update25
Oracle JRE=1.6.0-update85
Oracle JRE=1.7.0-update72
Oracle JRE=1.8.0-update25
Remediation
Event History
Jan 21, 2015
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-6601?
CVE-2014-6601 is considered a critical vulnerability due to its potential impact on confidentiality, integrity, and availability.
2
How do I fix CVE-2014-6601?
To fix CVE-2014-6601, update your Oracle Java SE installations to the latest versions.
3
Which systems are affected by CVE-2014-6601?
CVE-2014-6601 affects various versions of Oracle Java SE, including versions 6u85, 7u72, and 8u25 across several Linux distributions.
4
What types of attacks exploit CVE-2014-6601?
CVE-2014-6601 can be exploited by remote attackers using unspecified vectors related to Hotspot.
5
Is there a workaround for CVE-2014-6601?
There are no specific workarounds recommended for CVE-2014-6601, so updating to the latest versions is essential.