CVE-2015-0458: High severity oracle java se 7 vulnerability

Published Apr 14, 2015

Updated

Oracle Java SE 6u95, 7u79 and 8u45 fixes an unspecified vulnerability in the Deployment component (CVE-2015-0458). Upstream has CVSSv2 scored this issue as: 7.6/AV:N/AC:H/Au:N/C:C/I:C/A:C

External Reference:

http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html#AppendixJAVA

Other sources

Unspecified vulnerability in in Oracle Java SE 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

— MITRE

Affected Software

8 affected components

Oracle JDK=1.6.0-update91

Oracle JDK=1.7.0-update76

Oracle JDK=1.8.0-update40

Oracle JRE=1.6.0-update91

Oracle JRE=1.7.0-update76

Oracle JRE=1.8.0-update40

Novell Suse Linux Enterprise Desktop=11.0-sp3

openSUSE openSUSE=13.2

Event History

Apr 14, 2015

Data Sourced

via Red Hat·08:32 PM

DescriptionSeverityAffected Software

Apr 16, 2015

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-0458?

CVE-2015-0458 has a CVSSv2 score of 7.6, indicating a high severity vulnerability.

Which versions of Oracle Java are affected by CVE-2015-0458?

CVE-2015-0458 affects Oracle Java SE versions 6u95, 7u79, and 8u45.

How do I fix CVE-2015-0458?

To fix CVE-2015-0458, update your Oracle Java SE installation to the latest version.

What component is vulnerable in CVE-2015-0458?

CVE-2015-0458 affects the Deployment component of Oracle Java.

Can CVE-2015-0458 lead to unauthorized access?

Yes, CVE-2015-0458 may allow an attacker to gain unauthorized access due to the vulnerability.