Executive Summary

Informations
Name CVE-2014-6513 First vendor Publication 2014-10-15
Vendor Cve Last vendor Modification 2024-11-21

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:C/I:C/A:C)
Cvss Base Score 10 Attack Range Network
Cvss Impact Score 10 Attack Complexity Low
Cvss Expoit Score 10 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6513

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:27028
 
Oval ID: oval:org.mitre.oval:def:27028
Title: USN-2388-2 -- OpenJDK 7 vulnerabilities
Description: USN-2388-1 fixed vulnerabilities in OpenJDK 7 for Ubuntu 14.04 LTS. This update provides the corresponding updates for Ubuntu 14.10. Original advisory details: A vulnerability was discovered in the OpenJDK JRE related to information disclosure and data integrity. An attacker could exploit this to expose sensitive data over the network. (<a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-6457">CVE-2014-6457</a>) Several vulnerabilities were discovered in the OpenJDK JRE related to data integrity. (<a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-6502">CVE-2014-6502</a>, <a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-6512">CVE-2014-6512</a>, <a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-6519">CVE-2014-6519</a>, <a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-6527">CVE-2014-6527</a>, <a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-6558">CVE-2014-6558</a>) Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure. An attacker could exploit these to expose sensitive data over the network. (<a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-6504">CVE-2014-6504</a>, <a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-6511">CVE-2014-6511</a>, <a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-6517">CVE-2014-6517</a>, <a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-6531">CVE-2014-6531</a>) Two vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity and availability. An attacker could exploit these to cause a denial of service or expose sensitive data over the network. (<a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-6506">CVE-2014-6506</a>, <a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-6513">CVE-2014-6513</a>)
Family: unix Class: patch
Reference(s): USN-2388-2
CVE-2014-6457
CVE-2014-6502
CVE-2014-6512
CVE-2014-6519
CVE-2014-6527
CVE-2014-6558
CVE-2014-6504
CVE-2014-6511
CVE-2014-6517
CVE-2014-6531
CVE-2014-6506
CVE-2014-6513
 Version: 3
Platform(s): Ubuntu 14.10
 Product(s): openjdk-7
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:27128
 
Oval ID: oval:org.mitre.oval:def:27128
Title: USN-2386-1 -- OpenJDK 6 vulnerabilities
Description: A vulnerability was discovered in the OpenJDK JRE related to information disclosure and data integrity. An attacker could exploit this to expose sensitive data over the network. (<a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-6457">CVE-2014-6457</a>) Several vulnerabilities were discovered in the OpenJDK JRE related to data integrity. (<a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-6502">CVE-2014-6502</a>, <a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-6512">CVE-2014-6512</a>, <a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-6519">CVE-2014-6519</a>, <a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-6558">CVE-2014-6558</a>) Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure. An attacker could exploit these to expose sensitive data over the network. (<a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-6504">CVE-2014-6504</a>, <a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-6511">CVE-2014-6511</a>, <a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-6517">CVE-2014-6517</a>, <a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-6531">CVE-2014-6531</a>) Two vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity and availability. An attacker could exploit these to cause a denial of service or expose sensitive data over the network. (<a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-6506">CVE-2014-6506</a>, <a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-6513">CVE-2014-6513</a>)
Family: unix Class: patch
Reference(s): USN-2386-1
CVE-2014-6457
CVE-2014-6502
CVE-2014-6512
CVE-2014-6519
CVE-2014-6558
CVE-2014-6504
CVE-2014-6511
CVE-2014-6517
CVE-2014-6531
CVE-2014-6506
CVE-2014-6513
 Version: 3
Platform(s): Ubuntu 12.04
Ubuntu 10.04
 Product(s): openjdk-6
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:27170
 
Oval ID: oval:org.mitre.oval:def:27170
Title: USN-2388-1 -- OpenJDK 7 vulnerabilities
Description: A vulnerability was discovered in the OpenJDK JRE related to information disclosure and data integrity. An attacker could exploit this to expose sensitive data over the network. (<a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-6457">CVE-2014-6457</a>) Several vulnerabilities were discovered in the OpenJDK JRE related to data integrity. (<a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-6502">CVE-2014-6502</a>, <a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-6512">CVE-2014-6512</a>, <a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-6519">CVE-2014-6519</a>, <a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-6527">CVE-2014-6527</a>, <a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-6558">CVE-2014-6558</a>) Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure. An attacker could exploit these to expose sensitive data over the network. (<a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-6504">CVE-2014-6504</a>, <a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-6511">CVE-2014-6511</a>, <a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-6517">CVE-2014-6517</a>, <a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-6531">CVE-2014-6531</a>) Two vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity and availability. An attacker could exploit these to cause a denial of service or expose sensitive data over the network. (<a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-6506">CVE-2014-6506</a>, <a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-6513">CVE-2014-6513</a>)
Family: unix Class: patch
Reference(s): USN-2388-1
CVE-2014-6457
CVE-2014-6502
CVE-2014-6512
CVE-2014-6519
CVE-2014-6527
CVE-2014-6558
CVE-2014-6504
CVE-2014-6511
CVE-2014-6517
CVE-2014-6531
CVE-2014-6506
CVE-2014-6513
 Version: 3
Platform(s): Ubuntu 14.04
 Product(s): openjdk-7
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:27929
 
Oval ID: oval:org.mitre.oval:def:27929
Title: IBM SDK Java Technology Edition vulnerability
Description: Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT.
Family: unix Class: vulnerability
Reference(s): CVE-2014-6513
 Version: 4
Platform(s): IBM AIX 6.1
IBM AIX 7.1
 Product(s):
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:28845
 
Oval ID: oval:org.mitre.oval:def:28845
Title: JRE and JDK Vulnerability on HPUX
Description: Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT.
Family: unix Class: vulnerability
Reference(s): CVE-2014-6513
 Version: 4
Platform(s): HP-UX 11
 Product(s):
Definition Synopsis:

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 2
Application 4

Nessus® Vulnerability Scanner

Date Description
2015-05-20 Name : The remote SUSE host is missing one or more security updates.
File : suse_SU-2014-1422-1.nasl - Type : ACT_GATHER_INFO
2015-02-16 Name : The remote Gentoo host is missing one or more security-related patches.
File : gentoo_GLSA-201502-12.nasl - Type : ACT_GATHER_INFO
2014-12-01 Name : The remote SuSE 11 host is missing one or more security updates.
File : suse_11_java-1_6_0-ibm-141119.nasl - Type : ACT_GATHER_INFO
2014-12-01 Name : The remote SuSE 11 host is missing one or more security updates.
File : suse_11_java-1_7_0-ibm-141121.nasl - Type : ACT_GATHER_INFO
2014-11-28 Name : The remote AIX host has a version of Java SDK installed that is affected by m...
File : aix_java_oct2014_advisory.nasl - Type : ACT_GATHER_INFO
2014-11-12 Name : The remote SuSE 11 host is missing one or more security updates.
File : suse_11_java-1_7_0-openjdk-141024.nasl - Type : ACT_GATHER_INFO
2014-10-24 Name : The remote Ubuntu host is missing one or more security-related patches.
File : ubuntu_USN-2388-2.nasl - Type : ACT_GATHER_INFO
2014-10-23 Name : The remote Ubuntu host is missing one or more security-related patches.
File : ubuntu_USN-2388-1.nasl - Type : ACT_GATHER_INFO
2014-10-17 Name : The remote Ubuntu host is missing one or more security-related patches.
File : ubuntu_USN-2386-1.nasl - Type : ACT_GATHER_INFO
2014-10-15 Name : The remote Windows host contains a programming platform that is affected by m...
File : oracle_java_cpu_oct_2014.nasl - Type : ACT_GATHER_INFO
2014-10-15 Name : The remote Unix host contains a programming platform that is affected by mult...
File : oracle_java_cpu_oct_2014_unix.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00013.html
http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html
http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.html
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00027.html
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00036.html
http://marc.info/?l=bugtraq&m=141775382904016&w=2
http://marc.info/?l=bugtraq&m=141775382904016&w=2
http://secunia.com/advisories/61609
http://secunia.com/advisories/61629
http://security.gentoo.org/glsa/glsa-201502-12.xml
http://www-01.ibm.com/support/docview.wss?uid=swg21688283
http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
http://www.securityfocus.com/bid/70569
http://www.ubuntu.com/usn/USN-2386-1
http://www.ubuntu.com/usn/USN-2388-1
http://www.ubuntu.com/usn/USN-2388-2
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
Date Informations
2024-11-28 12:42:32
  • Multiple Updates
2022-05-13 21:27:52
  • Multiple Updates
2021-05-04 12:33:39
  • Multiple Updates
2021-04-22 01:40:30
  • Multiple Updates
2020-09-08 17:22:43
  • Multiple Updates
2020-05-23 00:42:07
  • Multiple Updates
2016-04-27 01:10:54
  • Multiple Updates
2015-05-21 13:31:36
  • Multiple Updates
2015-03-21 00:26:24
  • Multiple Updates
2015-03-20 00:26:26
  • Multiple Updates
2015-03-17 09:26:30
  • Multiple Updates
2015-02-27 21:23:59
  • Multiple Updates
2015-02-21 09:23:59
  • Multiple Updates
2015-02-17 13:25:01
  • Multiple Updates
2014-12-12 09:24:20
  • Multiple Updates
2014-12-08 21:26:43
  • Multiple Updates
2014-12-03 09:27:24
  • Multiple Updates
2014-12-01 13:27:10
  • Multiple Updates
2014-11-29 13:27:19
  • Multiple Updates
2014-11-20 09:23:57
  • Multiple Updates
2014-11-13 13:27:14
  • Multiple Updates
2014-11-05 13:29:31
  • Multiple Updates
2014-10-31 13:25:45
  • Multiple Updates
2014-10-28 13:26:58
  • Multiple Updates
2014-10-25 13:25:30
  • Multiple Updates
2014-10-24 13:27:41
  • Multiple Updates
2014-10-24 13:25:36
  • Multiple Updates
2014-10-18 13:26:14
  • Multiple Updates
2014-10-18 00:23:10
  • Multiple Updates
2014-10-16 13:25:43
  • Multiple Updates
2014-10-16 05:27:30
  • First insertion