REDHAT-BUG-985501
First published: Wed Jul 17 2013(Updated: )
The July 2013 updates for the IBM JDK (5.0 SR16-FP3, 6 SR14, 6.0.1 SR6, 7 SR5) contain patches for unspecified security flaws. For the majority of the flaws, upstream has provided a CVSSv2 base score of 9.3, which suggests a CVSSv2 vector of AV:N/AC:M/Au:N/C:P/I:P/A:P. The exception is <a href="https://access.redhat.com/security/cve/CVE-2013-4002">CVE-2013-4002</a> with a CVSSv2 base score of 7.1. CVE CVSSv2 Score Fixed in <a href="https://access.redhat.com/security/cve/CVE-2013-3006">CVE-2013-3006</a> 9.3 7 SR5 <a href="https://access.redhat.com/security/cve/CVE-2013-3007">CVE-2013-3007</a> 9.3 6.0.1 SR6, 7 SR5 <a href="https://access.redhat.com/security/cve/CVE-2013-3008">CVE-2013-3008</a> 9.3 7 SR5 <a href="https://access.redhat.com/security/cve/CVE-2013-3009">CVE-2013-3009</a> 9.3 5.0 SR16-FP3, 6 SR14, 6.0.1 SR6, 7 SR5 <a href="https://access.redhat.com/security/cve/CVE-2013-3010">CVE-2013-3010</a> 9.3 6.0.1 SR6, 7 SR5 <a href="https://access.redhat.com/security/cve/CVE-2013-3011">CVE-2013-3011</a> 9.3 5.0 SR16-FP3, 6 SR14, 6.0.1 SR6, 7 SR5 <a href="https://access.redhat.com/security/cve/CVE-2013-3012">CVE-2013-3012</a> 9.3 5.0 SR16-FP3, 6 SR14, 6.0.1 SR6, 7 SR5 <a href="https://access.redhat.com/security/cve/CVE-2013-4002">CVE-2013-4002</a> 7.1 5.0 SR16-FP3, 6 SR14, 6.0.1 SR6, 7 SR5 References: <a href="https://www.ibm.com/developerworks/java/jdk/alerts/">https://www.ibm.com/developerworks/java/jdk/alerts/</a> <a href="http://www.ibm.com/developerworks/java/jdk/aix/j764/Java7_64.fixes.html#SR5">http://www.ibm.com/developerworks/java/jdk/aix/j764/Java7_64.fixes.html#SR5</a> <a href="http://www.ibm.com/developerworks/java/jdk/aix/j664/Java6_64.fixes.html#SR14">http://www.ibm.com/developerworks/java/jdk/aix/j664/Java6_64.fixes.html#SR14</a> <a href="http://www.ibm.com/developerworks/java/jdk/aix/j564/fixes.html#SR16FP3">http://www.ibm.com/developerworks/java/jdk/aix/j564/fixes.html#SR16FP3</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM JDK 8 | >=5.0 SR16-FP3<6.0.1 SR6>=6 SR14<7 SR5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://access.redhat.com/security/cve/CVE-2013-4002
- https://access.redhat.com/security/cve/CVE-2013-3006
- https://access.redhat.com/security/cve/CVE-2013-3007
- https://access.redhat.com/security/cve/CVE-2013-3008
- https://access.redhat.com/security/cve/CVE-2013-3009
- https://access.redhat.com/security/cve/CVE-2013-3010
- https://access.redhat.com/security/cve/CVE-2013-3011
- https://access.redhat.com/security/cve/CVE-2013-3012
- https://www.ibm.com/developerworks/java/jdk/alerts/
- http://www.ibm.com/developerworks/java/jdk/aix/j764/Java7_64.fixes.html#SR5
- http://www.ibm.com/developerworks/java/jdk/aix/j664/Java6_64.fixes.html#SR14
- http://www.ibm.com/developerworks/java/jdk/aix/j564/fixes.html#SR16FP3
- https://rhn.redhat.com/errata/RHSA-2013-1081.html
- https://rhn.redhat.com/errata/RHSA-2013-1059.html
- https://rhn.redhat.com/errata/RHSA-2013-1060.html
- http://seclists.org/fulldisclosure/2013/Jul/172
- http://www.security-explorations.com/materials/SE-2012-01-IBM-2.pdf
- http://www.security-explorations.com/materials/se-2012-01-62-68.zip
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=985501#c2
- http://seclists.org/fulldisclosure/2016/Apr/20
- https://bugzilla.redhat.com/show_bug.cgi?id=985501
Frequently Asked Questions
What is the severity of REDHAT-BUG-985501?
The severity of REDHAT-BUG-985501 is very high with a CVSSv2 base score of 9.3.
How do I fix REDHAT-BUG-985501?
To fix REDHAT-BUG-985501, update to the latest version of IBM JDK as specified in the patch release.
What versions of IBM JDK are affected by REDHAT-BUG-985501?
Affected versions by REDHAT-BUG-985501 include IBM JDK 5.0 SR16-FP3, 6 SR14, 6.0.1 SR6, and 7 SR5.
What types of vulnerabilities are included in REDHAT-BUG-985501?
REDHAT-BUG-985501 contains unspecified security flaws that could lead to potential information disclosure and unauthorized access.
Is there any known exploit for REDHAT-BUG-985501?
As of now, no specific known exploits for REDHAT-BUG-985501 have been documented.
- collector/redhat-bugzilla
- alias/CVE-2013-3006
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/severity
- agent/references
- agent/description
- agent/event
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/ibm
- canonical/ibm jdk 8