CVE-2014-6593

Published: Jan 21, 2015Modified: May 6, 2026

4.0

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:N

Exploitability: 4.9 / Impact: 4.9

Source: NVD

Description

Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit 27.8.4 and 28.3.4 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE.

Affected (14)

Products: Oracle: Jrockit, Jdk, Jre

3 products

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Oracle Jrockit	Version r27.8.4
Oracle Jrockit	Version r28.3.4

Configuration B

12 vulnerable

Vulnerable Software	Affected Versions
Oracle Jdk	Version 1.5.0 update75
Oracle Jdk	Version 1.6.0 update85
Oracle Jdk	Version 1.7.0 update71
Oracle Jdk	Version 1.7.0 update72
Oracle Jdk	Version 1.8.0 update25
Oracle Jdk	Version 1.8.0 update6
Oracle Jre	Version 1.5.0 update75
Oracle Jre	Version 1.6.0 update85
Oracle Jre	Version 1.7.0 update71
Oracle Jre	Version 1.7.0 update72
Oracle Jre	Version 1.8.0 update25
Oracle Jre	Version 1.8.0 update6

References (54)

http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581

Source: secalert_us@oracle.com

http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html

Source: secalert_us@oracle.com

http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html

Source: secalert_us@oracle.com

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html

Source: secalert_us@oracle.com

http://marc.info/?l=bugtraq&m=142496355704097&w=2

Source: secalert_us@oracle.com

http://marc.info/?l=bugtraq&m=142607790919348&w=2

Source: secalert_us@oracle.com

http://packetstormsecurity.com/files/134251/Java-Secure-Socket-Extension-JSSE-SKIP-TLS.html

Source: secalert_us@oracle.com

http://rhn.redhat.com/errata/RHSA-2015-0068.html

Source: secalert_us@oracle.com

http://rhn.redhat.com/errata/RHSA-2015-0079.html

Source: secalert_us@oracle.com

http://rhn.redhat.com/errata/RHSA-2015-0080.html

Source: secalert_us@oracle.com

http://rhn.redhat.com/errata/RHSA-2015-0085.html

Source: secalert_us@oracle.com

http://rhn.redhat.com/errata/RHSA-2015-0086.html

Source: secalert_us@oracle.com

http://rhn.redhat.com/errata/RHSA-2015-0136.html

Source: secalert_us@oracle.com

http://rhn.redhat.com/errata/RHSA-2015-0264.html

Source: secalert_us@oracle.com

http://www.debian.org/security/2015/dsa-3144

Source: secalert_us@oracle.com

http://www.debian.org/security/2015/dsa-3147

Source: secalert_us@oracle.com

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

Source: secalert_us@oracle.com

PatchVendor Advisory

http://www.securityfocus.com/bid/72169

Source: secalert_us@oracle.com

http://www.securitytracker.com/id/1031580

Source: secalert_us@oracle.com

http://www.ubuntu.com/usn/USN-2486-1

Source: secalert_us@oracle.com

http://www.ubuntu.com/usn/USN-2487-1

Source: secalert_us@oracle.com

http://www.vmware.com/security/advisories/VMSA-2015-0003.html

Source: secalert_us@oracle.com

https://kc.mcafee.com/corporate/index?page=content&id=SB10104

Source: secalert_us@oracle.com

https://security.gentoo.org/glsa/201507-14

Source: secalert_us@oracle.com

https://security.gentoo.org/glsa/201603-14

Source: secalert_us@oracle.com

https://www-304.ibm.com/support/docview.wss?uid=swg21695474

Source: secalert_us@oracle.com

https://www.exploit-db.com/exploits/38641/

Source: secalert_us@oracle.com

http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581