First published: Tue Apr 14 2015(Updated: )
Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5, allows remote attackers to affect availability via vectors related to JSSE.
Credit: secalert_us@oracle.com
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/IcedTea6 | <1.13.7 | 1.13.7 |
redhat/IcedTea7 | <2.5.5 | 2.5.5 |
BEA JRockit | =r28.3.5 | |
Oracle JDK 6 | =1.5.0-update8 | |
Oracle JDK 6 | =1.6.0-update91 | |
Oracle JDK 6 | =1.7.0-update76 | |
Oracle JDK 6 | =1.8.0-update40 | |
Oracle Java Runtime Environment (JRE) | =1.5.0-update81 | |
Oracle Java Runtime Environment (JRE) | =1.6.0-update91 | |
Oracle Java Runtime Environment (JRE) | =1.7.0-update76 | |
Oracle Java Runtime Environment (JRE) | =1.8.0-update40 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-0488 is considered a vulnerability that can affect the availability of affected systems.
To resolve CVE-2015-0488, update your Oracle Java SE or JRockit to the latest patched version provided by Oracle.
CVE-2015-0488 affects Oracle Java SE versions 5.0u81, 6u91, 7u76, and 8u40, as well as JRockit R28.3.5.
Organizations using the affected versions of Oracle Java SE and JRockit may be impacted by CVE-2015-0488.
The vulnerability in CVE-2015-0488 is related to the JSSE (Java Secure Socket Extension) component.