CVE-2015-4729: Medium severity oracle java se 7 vulnerability

Q: What is the severity of CVE-2015-4729?

CVE-2015-4729 has a CVSSv2 score of 4.0, indicating it is of moderate severity.

Q: How do I fix CVE-2015-4729?

To fix CVE-2015-4729, upgrade to the latest versions of Java provided in the remedy section, such as 1.7.0-oracle-1:1.7.0.85-1jpp.* or 1.8.0-oracle-1:1.8.0.51-1jpp.*.

Q: Which versions of Java are affected by CVE-2015-4729?

CVE-2015-4729 affects Oracle Java SE version 7u85 and 8u51, among other related versions.

Q: What component is affected by CVE-2015-4729?

The vulnerability in CVE-2015-4729 affects the Deployment component in Oracle Java SE.

Q: Is CVE-2015-4729 exploitable remotely?

Yes, CVE-2015-4729 can be exploited remotely due to its nature of affecting the Deployment component.

Published Jul 14, 2015

Updated

Oracle Java SE 7u85 and 8u51 fixes an unspecified vulnerability in the Deployment component (CVE-2015-4729). Upstream has CVSSv2 scored this issue as: 4.0/AV:N/AC:H/Au:N/C:P/I:P/A:N

External Reference:

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html#AppendixJAVA

Other sources

Unspecified vulnerability in Oracle Java SE 7u80 and 8u45 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment.

Affected Software

12 affected componentsFixes available

redhat/java<1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11

1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11

redhat/java<1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6

1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6

redhat/java<1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6

1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6

redhat/java<1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1

1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1

redhat/java<1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1

1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1

redhat/java<1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5

1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5

redhat/java<1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7

1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7

redhat/java<1.7.1-ibm-1:1.7.1.3.10-1jpp.1.ael7b

1.7.1-ibm-1:1.7.1.3.10-1jpp.1.ael7b

Oracle JDK=1.7.0-update80

Oracle JDK=1.8.0-update45

ORACLE JRE=1.7.0-update_80

ORACLE JRE=1.8.0-update_45

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

Event History

Jul 14, 2015

CVE Published

12:00 AM

Jul 15, 2015

Data Sourced

07:08 AM

DescriptionSeverityAffected Software

Jul 16, 2015

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Parent advisories

This vulnerability appears in the following advisories.

Frequently Asked Questions

What is the severity of CVE-2015-4729?