CVE-2015-4810: Medium severity oracle java se 7 vulnerability

Q: What is the severity of CVE-2015-4810?

CVE-2015-4810 has a CVSSv2 score of 6.9, indicating a medium severity vulnerability.

Q: How do I fix CVE-2015-4810?

To fix CVE-2015-4810, update to the recommended Java versions specified in the remediation package list.

Q: Which Java versions are affected by CVE-2015-4810?

CVE-2015-4810 affects Oracle Java SE 7u91 and 8u65 as well as various IBM Java versions.

Q: Is CVE-2015-4810 a local or remote vulnerability?

CVE-2015-4810 is categorized as a local vulnerability since its access vector is local.

Q: What components are affected by CVE-2015-4810?

CVE-2015-4810 affects the Deployment component of Oracle Java.

Published Oct 20, 2015

Updated

Oracle Java SE 7u91 and 8u65 fixes an unspecified vulnerability in the Deployment component (CVE-2015-4810). Upstream has CVSSv2 scored this issue as: 6.9/AV:L/AC:M/Au:N/C:C/I:C/A:C

External Reference:

http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html#AppendixJAVA

Other sources

Unspecified vulnerability in Oracle Java SE 7u85 and 8u60 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

Affected Software

17 affected componentsFixes available

redhat/java<1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11

1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11

redhat/java<1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7

1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7

redhat/java<1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7

1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7

redhat/java<1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1

1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1

redhat/java<1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1

1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1

redhat/java<1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5

1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5

redhat/java<1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7

1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7

redhat/java<1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7

1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7

redhat/java<1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7

1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7

redhat/java<1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5

1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5

redhat/java<1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7

1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7

redhat/spacewalk-java<0:2.0.2-109.el6

0:2.0.2-109.el6

redhat/spacewalk-java<0:2.3.8-146.el6

0:2.3.8-146.el6

Oracle JDK=1.7.0-update85

Oracle JDK=1.8.0-update60

ORACLE JRE=1.7.0-update_85

ORACLE JRE=1.8.0-update_60

Event History

Oct 20, 2015

CVE Published

12:00 AM

Oct 21, 2015

Data Sourced

via Red Hat·12:14 PM

DescriptionSeverityAffected Software

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Parent advisories

This vulnerability appears in the following advisories.

Frequently Asked Questions

What is the severity of CVE-2015-4810?

CVE-2015-4810 has a CVSSv2 score of 6.9, indicating a medium severity vulnerability.

How do I fix CVE-2015-4810?