CVE-2015-0408: Critical severity oracle java se 7 vulnerability
Published Jan 21, 2015
·Updated
Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI.
Affected Software
20 affected components
Oracle JDK=1.5.0-update75
Oracle JDK=1.6.0-update85
Oracle JDK=1.7.0-update72
Oracle JDK=1.8.0-update25
Oracle JRE=1.5.0-update75
Oracle JRE=1.6.0-update85
Oracle JRE=1.7.0-update72
Oracle JRE=1.8.0-update25
Canonical Ubuntu Linux=10.04
Canonical Ubuntu Linux=12.04
Canonical Ubuntu Linux=14.04
Canonical Ubuntu Linux=14.10
Debian Debian Linux=7.0
Debian Debian Linux=8.0
Novell Suse Linux Enterprise Desktop=11.0-sp3
Novell Suse Linux Enterprise Server=12.0
openSUSE openSUSE=13.2
redhat Enterprise Linux=5.0
redhat Enterprise Linux=6.0
redhat Enterprise Linux=7.0
Event History
Jan 21, 2015
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-0408?
CVE-2015-0408 has a medium severity rating that affects the confidentiality, integrity, and availability of systems utilizing vulnerable Java versions.
2
How do I fix CVE-2015-0408?
To fix CVE-2015-0408, upgrade to the latest version of Oracle Java SE or apply the appropriate patches provided by Oracle.
3
Which versions are affected by CVE-2015-0408?
CVE-2015-0408 affects Oracle Java SE versions 5.0u75, 6u85, 7u72, and 8u25.
4
Can CVE-2015-0408 be exploited remotely?
Yes, CVE-2015-0408 can be exploited remotely by attackers via vectors related to RMI.
5
Is CVE-2015-0408 a zero-day vulnerability?
CVE-2015-0408 was reported as a vulnerability that affects multiple versions of Java and is not a zero-day exploit.