Exploited
medium
5.3
CWE
284
Advisory Published
CVE Published
Updated

CVE-2015-4902: Oracle Java SE Integrity Check Vulnerability

First published: Tue Oct 20 2015(Updated: )

Oracle Java SE 6u105, 7u91 and 8u65 fixes an unspecified vulnerability in the Deployment component (<a href="https://access.redhat.com/security/cve/CVE-2015-4902">CVE-2015-4902</a>). Upstream has CVSSv2 scored this issue as: 5.0/AV:N/AC:L/Au:N/C:N/I:P/A:N External Reference: <a href="http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html#AppendixJAVA">http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html#AppendixJAVA</a>

Credit: secalert_us@oracle.com secalert_us@oracle.com

Affected SoftwareAffected VersionHow to fix
redhat/java<1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11
1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11
redhat/java<1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11
1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11
redhat/java<1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7
1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7
redhat/java<1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7
1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7
redhat/java<1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7
1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7
redhat/java<1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1
1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1
redhat/java<1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1
1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1
redhat/java<1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1
1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1
redhat/java<1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5
1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5
redhat/java<1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el5
1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el5
redhat/java<1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el5
1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el5
redhat/java<1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7
1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7
redhat/java<1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7
1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7
redhat/java<1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7
1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7
redhat/java<1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7
1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7
redhat/java<1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7
1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7
redhat/java<1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5
1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5
redhat/java<1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7
1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7
redhat/spacewalk-java<0:2.0.2-109.el6
0:2.0.2-109.el6
redhat/spacewalk-java<0:2.3.8-146.el6
0:2.3.8-146.el6
Oracle Java SE 7
Oracle Java SE 7=1.6.0-update101
Oracle Java SE 7=1.7.0-update85
Oracle Java SE 7=1.8.0-update60
Oracle JRE=1.6.0-update101
Oracle JRE=1.7.0-update85
Oracle JRE=1.8.0-update60
Red Hat Satellite=5.6
Red Hat Satellite=5.7
Red Hat Enterprise Linux Desktop=5.0
Red Hat Enterprise Linux Desktop=6.0
Red Hat Enterprise Linux Desktop=7.0
Red Hat Enterprise Linux Server EUS=6.7
Red Hat Enterprise Linux Server EUS=7.2
Red Hat Enterprise Linux Server EUS=7.3
Red Hat Enterprise Linux Server EUS=7.4
Red Hat Enterprise Linux Server EUS=7.5
Red Hat Enterprise Linux=7.2
Red Hat Enterprise Linux=7.3
Red Hat Enterprise Linux for IBM Z Systems=5.0_s390x
Red Hat Enterprise Linux for IBM Z Systems=6.0_s390x
Red Hat Enterprise Linux for IBM Z Systems=7.0_s390x
Red Hat Enterprise Linux for IBM Z Systems (s390x)=6.7_s390x
Red Hat Enterprise Linux for IBM Z Systems (s390x)=7.2_s390x
Red Hat Enterprise Linux for IBM Z Systems (s390x)=7.3_s390x
Red Hat Enterprise Linux for IBM Z Systems (s390x)=7.4_s390x
Red Hat Enterprise Linux for IBM Z Systems (s390x)=7.5_s390x
Red Hat Enterprise Linux for Power, big endian=5.0_ppc
Red Hat Enterprise Linux for Power, big endian=6.0_ppc64
Red Hat Enterprise Linux for Power, big endian=7.0_ppc64
Red Hat Enterprise Linux for Power, Big Endian EUS=6.7_ppc64
Red Hat Enterprise Linux for Power, Big Endian EUS=7.2_ppc64
Red Hat Enterprise Linux for Power, Big Endian EUS=7.3_ppc64
Red Hat Enterprise Linux for Power, Big Endian EUS=7.4_ppc64
Red Hat Enterprise Linux for Power, Big Endian EUS=7.5_ppc64
Red Hat Enterprise Linux for Power, little endian=7.0_ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support=7.2_ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support=7.3_ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support=7.4_ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support=7.5_ppc64le
Red Hat Enterprise Linux for Scientific Computing=6.0
Red Hat Enterprise Linux for Scientific Computing=7.0
Red Hat Enterprise Linux Server=5.0
Red Hat Enterprise Linux Server=6.0
Red Hat Enterprise Linux Server=7.0
Red Hat Enterprise Linux Server Supplementary EUS=5.0
Red Hat Enterprise Linux Server Supplementary EUS=6.0
Red Hat Enterprise Linux Server Supplementary EUS=7.0
Red Hat Enterprise Linux Workstation=5.0
Red Hat Enterprise Linux Workstation=6.0
Red Hat Enterprise Linux Workstation=7.0
SUSE Linux Enterprise Module for Legacy=12
SUSE Linux=42.1
openSUSE=13.2
SUSE Linux Enterprise Server=10-sp4
SUSE Linux Enterprise Server=11-sp2
SUSE Linux Enterprise Server=11-sp3
SUSE Linux Enterprise Server=11-sp3
SUSE Linux Enterprise Server=11-sp4
SUSE Linux Enterprise Server=12
SUSE Linux Enterprise Server=12-sp1
SUSE Linux Enterprise Software Development Kit=11-sp3
SUSE Linux Enterprise Software Development Kit=11-sp4
SUSE Linux Enterprise Software Development Kit=12
SUSE Linux Enterprise Software Development Kit=12-sp1
Oracle JRE=1.6.0-update_101
Oracle JRE=1.7.0-update_85
Oracle JRE=1.8.0-update_60

Remedy

http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Parent vulnerabilities

(Appears in the following advisories)

Frequently Asked Questions

  • What is the severity of CVE-2015-4902?

    CVE-2015-4902 has a CVSSv2 score of 5.0, indicating a medium severity vulnerability.

  • What components are affected by CVE-2015-4902?

    CVE-2015-4902 affects the Deployment component within Oracle Java SE versions 6u105, 7u91, and 8u65.

  • How do I fix CVE-2015-4902?

    To mitigate CVE-2015-4902, update to the fixed versions of Oracle Java SE as recommended by Oracle.

  • What versions of Java are impacted by CVE-2015-4902?

    CVE-2015-4902 impacts Oracle Java SE versions 6u105, 7u91, and 8u65.

  • Is there a known exploit for CVE-2015-4902?

    As of now, specific exploits for CVE-2015-4902 have not been publicly documented.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203