CVE-2015-0488: Medium severity oracle java se vulnerability
A flaw was found in the way the JSSE (Java Secure Socket Extension) component in OpenJDK parsed X.509 certificate options. A specially-crafted certificate could cause JSSE to raise an unexpected exception, possibly causing an application using JSSE to exit unexpectedly.
Other sources
Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5, allows remote attackers to affect availability via vectors related to JSSE.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-0488?
CVE-2015-0488 is considered a vulnerability that can affect the availability of affected systems.
How do I fix CVE-2015-0488?
To resolve CVE-2015-0488, update your Oracle Java SE or JRockit to the latest patched version provided by Oracle.
Which versions are affected by CVE-2015-0488?
CVE-2015-0488 affects Oracle Java SE versions 5.0u81, 6u91, 7u76, and 8u40, as well as JRockit R28.3.5.
Who is impacted by CVE-2015-0488?
Organizations using the affected versions of Oracle Java SE and JRockit may be impacted by CVE-2015-0488.
What component is involved in the CVE-2015-0488 vulnerability?
The vulnerability in CVE-2015-0488 is related to the JSSE (Java Secure Socket Extension) component.