First published: Thu Jul 02 2015(Updated: )
Unspecified vulnerability in IBM Java 8 before SR1, 7 R1 before SR2 FP11, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before SR16 FP10 allows remote attackers to gain privileges via unknown vectors related to the Java Virtual Machine.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM JDK | >=5.0.0.0<5.0.16.10 | |
IBM JDK | >=6.0.0.0<=6.0.16.4 | |
IBM JDK | >=6.1.0.0<6.1.8.4 | |
IBM JDK | >=7.0.0.0<=7.0.9 | |
IBM JDK | >=7.1.0.0<7.1.2.11 | |
IBM JDK | >=8.0<8.0.1.0 | |
Red Hat Enterprise Linux Desktop | =5.0 | |
Red Hat Enterprise Linux Desktop | =6.0 | |
Red Hat Enterprise Linux Desktop | =7.0 | |
Red Hat Enterprise Linux Server | =5.0 | |
Red Hat Enterprise Linux Server | =6.0 | |
Red Hat Enterprise Linux Server | =7.0 | |
Red Hat Enterprise Linux Server | =6.6 | |
Red Hat Enterprise Linux Server | =6.6 | |
Red Hat Enterprise Linux Server | =7.1 | |
Red Hat Enterprise Linux Server | =7.2 | |
Red Hat Enterprise Linux Server | =7.3 | |
Red Hat Enterprise Linux Server | =7.4 | |
Red Hat Enterprise Linux Server | =7.5 | |
Red Hat Enterprise Linux Workstation | =5.0 | |
Red Hat Enterprise Linux Workstation | =6.0 | |
Red Hat Enterprise Linux Workstation | =7.0 | |
SUSE Linux Enterprise Server | =10-sp4 | |
SUSE Linux Enterprise Server | =11-sp1 | |
SUSE Linux Enterprise Server | =11-sp2 | |
SUSE Linux Enterprise Server | =12 | |
SUSE Linux Enterprise Software Development Kit | =12 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-0192 is classified as a high-severity vulnerability that allows remote attackers to gain privileges.
To fix CVE-2015-0192, it is recommended to upgrade to the latest versions of IBM Java and apply all relevant security patches.
CVE-2015-0192 affects IBM Java versions prior to SR1 for 8, SR2 FP11 for 7, and various versions for 6 and 5.0.
Organizations using affected versions of IBM Java, particularly on Red Hat and SUSE Linux systems, are at risk.
The impact of CVE-2015-0192 can lead to unauthorized privilege escalation for remote attackers.