CVE-2015-0395: Critical severity ubuntu vulnerability

Published Jan 21, 2015

Updated

Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

Affected Software

20 affected components

Canonical Ubuntu Linux=10.04

Canonical Ubuntu Linux=12.04

Canonical Ubuntu Linux=14.04

Canonical Ubuntu Linux=14.10

Debian Debian Linux=7.0

Debian Debian Linux=8.0

Novell Suse Linux Enterprise Server=11.0-sp3

Novell Suse Linux Enterprise Server=12.0

openSUSE openSUSE=13.2

redhat Enterprise Linux=5

redhat Enterprise Linux=6.0

redhat Enterprise Linux=7.0

Oracle JDK=1.5.0-update75

Oracle JDK=1.6.0-update85

Oracle JDK=1.7.0-update72

Oracle JDK=1.8.0-update25

Oracle JRE=1.5.0-update75

Oracle JRE=1.6.0-update85

Oracle JRE=1.7.0-update72

Oracle JRE=1.8.0-update25

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

Event History

Jan 21, 2015

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-0395?

CVE-2015-0395 has a high severity rating as it affects the confidentiality, integrity, and availability of systems running vulnerable versions of Oracle Java.

How do I fix CVE-2015-0395?

To fix CVE-2015-0395, you should upgrade to the latest patched version of Oracle Java or apply security patches provided by your operating system vendor.

Which versions of Oracle Java are affected by CVE-2015-0395?

CVE-2015-0395 affects Oracle Java SE versions 5.0u75, 6u85, 7u72, and 8u25.

Is CVE-2015-0395 a remote code execution vulnerability?

No, CVE-2015-0395 is not specifically categorized as a remote code execution vulnerability, but it can impact system integrity and availability.

What operating systems are impacted by CVE-2015-0395?

CVE-2015-0395 impacts several operating systems, including various versions of Ubuntu, Debian, SUSE, and Red Hat Enterprise Linux that utilize vulnerable versions of Oracle Java.