CVE-2015-2627: Low severity oracle java se 7 vulnerability

Q: What is the severity of CVE-2015-2627?

CVE-2015-2627 has a CVSSv2 score of 2.6, indicating it is a low severity vulnerability.

Q: How do I fix CVE-2015-2627?

To fix CVE-2015-2627, update your Oracle Java SE to the appropriate patched version provided by Red Hat.

Q: Which versions of Java are affected by CVE-2015-2627?

CVE-2015-2627 affects Oracle Java SE versions 6u101, 7u85, and 8u51.

Q: Is CVE-2015-2627 exploitable remotely?

Yes, CVE-2015-2627 can be exploited remotely due to its nature in the Install component of Oracle Java.

Q: What component of Java does CVE-2015-2627 affect?

CVE-2015-2627 affects the Install component of Oracle Java SE.

Published Jul 14, 2015

Updated

Oracle Java SE 6u101, 7u85 and 8u51 fixes an unspecified vulnerability in the Install component (CVE-2015-2627). Upstream has CVSSv2 scored this issue as: 2.6/AV:N/AC:H/Au:N/C:P/I:N/A:N

External Reference:

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html#AppendixJAVA

Other sources

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality via unknown vectors related to installation.

Affected Software

14 affected componentsFixes available

redhat/java<1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11

1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11

redhat/java<1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11

1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11

redhat/java<1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6

1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6

redhat/java<1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6

1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6

redhat/java<1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6

1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6

redhat/java<1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1

1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1

redhat/java<1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1

1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1

redhat/java<1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1

1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1

Oracle JDK=1.6.0-update95

Oracle JDK=1.7.0-update80

Oracle JDK=1.8.0-update45

ORACLE JRE=1.6.0-update_95

ORACLE JRE=1.7.0-update_80

ORACLE JRE=1.8.0-update_45

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

Event History

Jul 14, 2015

CVE Published

12:00 AM

Jul 15, 2015

Data Sourced

07:08 AM

DescriptionSeverityAffected Software

Jul 16, 2015

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Parent advisories

This vulnerability appears in the following advisories.

Frequently Asked Questions

What is the severity of CVE-2015-2627?

CVE-2015-2627 has a CVSSv2 score of 2.6, indicating it is a low severity vulnerability.

How do I fix CVE-2015-2627?