First published: Wed Jan 21 2015(Updated: )
Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI.
Credit: secalert_us@oracle.com
Affected Software | Affected Version | How to fix |
---|---|---|
Oracle OpenJDK 1.8.0 | =1.5.0-update75 | |
Oracle OpenJDK 1.8.0 | =1.6.0-update85 | |
Oracle OpenJDK 1.8.0 | =1.7.0-update72 | |
Oracle OpenJDK 1.8.0 | =1.8.0-update25 | |
Oracle JRE | =1.5.0-update75 | |
Oracle JRE | =1.6.0-update85 | |
Oracle JRE | =1.7.0-update72 | |
Oracle JRE | =1.8.0-update25 | |
Ubuntu | =10.04 | |
Ubuntu | =12.04 | |
Ubuntu | =14.04 | |
Ubuntu | =14.10 | |
Debian | =7.0 | |
Debian | =8.0 | |
SUSE Linux Enterprise Desktop | =11.0-sp3 | |
SUSE Linux Enterprise Server | =12.0 | |
SUSE Linux | =13.2 | |
Red Hat Enterprise Linux | =5.0 | |
Red Hat Enterprise Linux | =6.0 | |
Red Hat Enterprise Linux | =7.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-0408 has a medium severity rating that affects the confidentiality, integrity, and availability of systems utilizing vulnerable Java versions.
To fix CVE-2015-0408, upgrade to the latest version of Oracle Java SE or apply the appropriate patches provided by Oracle.
CVE-2015-0408 affects Oracle Java SE versions 5.0u75, 6u85, 7u72, and 8u25.
Yes, CVE-2015-0408 can be exploited remotely by attackers via vectors related to RMI.
CVE-2015-0408 was reported as a vulnerability that affects multiple versions of Java and is not a zero-day exploit.