First published: Tue Jul 14 2015(Updated: )
Oracle Java SE 6u101, 7u85 and 8u51 fixes an unspecified vulnerability in the Install component (<a href="https://access.redhat.com/security/cve/CVE-2015-2627">CVE-2015-2627</a>). Upstream has CVSSv2 scored this issue as: 2.6/AV:N/AC:H/Au:N/C:P/I:N/A:N External Reference: <a href="http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html#AppendixJAVA">http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html#AppendixJAVA</a>
Credit: secalert_us@oracle.com
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/java | <1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11 | 1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11 |
redhat/java | <1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11 | 1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11 |
redhat/java | <1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6 | 1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6 |
redhat/java | <1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6 | 1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6 |
redhat/java | <1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6 | 1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6 |
redhat/java | <1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1 | 1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1 |
redhat/java | <1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1 | 1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1 |
redhat/java | <1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1 | 1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1 |
Oracle JDK 6 | =1.6.0-update95 | |
Oracle JDK 6 | =1.7.0-update80 | |
Oracle JDK 6 | =1.8.0-update45 | |
Oracle Java Runtime Environment (JRE) | =1.6.0-update_95 | |
Oracle Java Runtime Environment (JRE) | =1.7.0-update_80 | |
Oracle Java Runtime Environment (JRE) | =1.8.0-update_45 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Appears in the following advisories)
CVE-2015-2627 has a CVSSv2 score of 2.6, indicating it is a low severity vulnerability.
To fix CVE-2015-2627, update your Oracle Java SE to the appropriate patched version provided by Red Hat.
CVE-2015-2627 affects Oracle Java SE versions 6u101, 7u85, and 8u51.
Yes, CVE-2015-2627 can be exploited remotely due to its nature in the Install component of Oracle Java.
CVE-2015-2627 affects the Install component of Oracle Java SE.