CVE-2015-0437
First published: Wed Jan 21 2015(Updated: )
Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Java SE 7 | =1.8.0-update25 | |
| Oracle JRE | =1.8.0-update25 | |
| SUSE Linux Enterprise Desktop | =11.0-sp3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html
- http://rhn.redhat.com/errata/RHSA-2015-0080.html
- http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
- http://www.securityfocus.com/bid/72146
- http://www.securitytracker.com/id/1031580
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100144
- https://security.gentoo.org/glsa/201603-11
Frequently Asked Questions
What is the severity of CVE-2015-0437?
CVE-2015-0437 has a severity rating that affects the confidentiality, integrity, and availability of systems running Oracle Java SE 8u25.
How do I fix CVE-2015-0437?
To fix CVE-2015-0437, update to a patched version of Oracle Java SE beyond 8u25.
What platforms are affected by CVE-2015-0437?
CVE-2015-0437 affects Oracle JDK 1.8.0-update25 and Oracle JRE 1.8.0-update25, as well as specific versions of SUSE Linux Enterprise Desktop.
What types of attacks can exploit CVE-2015-0437?
CVE-2015-0437 can be exploited by remote attackers through unspecified vectors related to the Hotspot component.
Is CVE-2015-0437 a newly discovered vulnerability?
CVE-2015-0437 was disclosed in February 2015 as part of a wider set of security updates from Oracle.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/remedy
- agent/last-modified-date
- agent/author
- agent/references
- agent/event
- agent/first-publish-date
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/oracle
- canonical/oracle java se 7
- version/oracle java se 7/1.8.0-update25
- canonical/oracle jre
- version/oracle jre/1.8.0-update25
- vendor/novell
- canonical/suse linux enterprise desktop
- version/suse linux enterprise desktop/11.0-sp3