CVE-2015-0492: Critical severity opensuse vulnerability

Published Apr 14, 2015

Updated

Oracle Java SE 7u79 and 8u45 fixes an unspecified vulnerability in the JavaFX component (CVE-2015-0492). Upstream has CVSSv2 scored this issue as: 9.3/AV:N/AC:M/Au:N/C:C/I:C/A:C

External Reference:

http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html#AppendixJAVA

Other sources

Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and JavaFX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-0484.

— MITRE

Affected Software

11 affected components

openSUSE openSUSE=13.2

SUSE Linux Enterprise Server=11-sp3

Oracle JavaFX=2.2.76

Oracle JDK=1.5.0-update8

Oracle JDK=1.6.0-update91

Oracle JDK=1.7.0-update76

Oracle JDK=1.8.0-update40

Oracle JRE=1.5.0-update81

Oracle JRE=1.6.0-update91

Oracle JRE=1.7.0-update76

Oracle JRE=1.8.0-update40

Event History

Apr 14, 2015

Data Sourced

via Red Hat·08:31 PM

DescriptionSeverityAffected Software

Apr 16, 2015

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-0492?

CVE-2015-0492 has an unspecified severity level that affects confidentiality, integrity, and availability.

How do I fix CVE-2015-0492?

To fix CVE-2015-0492, update to Oracle Java SE versions 7u79 or 8u45.

What software is affected by CVE-2015-0492?

CVE-2015-0492 affects various versions of Oracle Java SE, JavaFX, and several distributions such as openSUSE and SUSE Linux Enterprise Server.

Can CVE-2015-0492 be exploited remotely?

Yes, CVE-2015-0492 allows remote attackers to potentially exploit the vulnerability through unknown vectors.

Is there a specific patch for CVE-2015-0492?

There is no specific patch mentioned, but users should upgrade to the specified versions of Oracle Java SE to mitigate the risk.