JDK: unspecified sandbox bypass (ORB)
Published Nov 24, 2013
9.3
HIGHCVSS 2.0
EPSS 6.10%
Description
Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6, 6.0.1 before SR7, and 6.0.0 before SR15 allows remote attackers to execute arbitrary code via unspecified vectors.
Affected products
No data.
No data.
Red Hat Network Satellite Server v 5.4
java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el5
Fixed · RHSA-2013:1793
Red Hat Network Satellite Server v 5.5
java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el5
Fixed · RHSA-2013:1793
Red Hat Satellite 5.6
java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el5
Fixed · RHSA-2013:1793
Supplementary for Red Hat Enterprise Linux 5
java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el5_10
Fixed · RHSA-2013:1508
Supplementary for Red Hat Enterprise Linux 5
java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el5_10
Fixed · RHSA-2013:1507
Supplementary for Red Hat Enterprise Linux 6
java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4
Fixed · RHSA-2013:1508
Supplementary for Red Hat Enterprise Linux 6
java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4
Fixed · RHSA-2013:1507
Red Hat Enterprise Linux 5
java-1.5.0-ibm
Not affected
Red Hat Enterprise Linux 6
java-1.5.0-ibm
Not affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Network Satellite Server v 5.4 | java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el5 | Fixed | RHSA-2013:1793 |
| Red Hat Network Satellite Server v 5.5 | java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el5 | Fixed | RHSA-2013:1793 |
| Red Hat Satellite 5.6 | java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el5 | Fixed | RHSA-2013:1793 |
| Supplementary for Red Hat Enterprise Linux 5 | java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el5_10 | Fixed | RHSA-2013:1508 |
| Supplementary for Red Hat Enterprise Linux 5 | java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el5_10 | Fixed | RHSA-2013:1507 |
| Supplementary for Red Hat Enterprise Linux 6 | java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4 | Fixed | RHSA-2013:1508 |
| Supplementary for Red Hat Enterprise Linux 6 | java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4 | Fixed | RHSA-2013:1507 |
| Red Hat Enterprise Linux 5 | java-1.5.0-ibm | Not affected | n/a |
| Red Hat Enterprise Linux 6 | java-1.5.0-ibm | Not affected | n/a |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
No CWE recorded.
References (14)
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00013.html vendor-advisoryx_refsource_SUSE
- http://rhn.redhat.com/errata/RHSA-2013-1507.html vendor-advisoryx_refsource_REDHAT
- http://rhn.redhat.com/errata/RHSA-2013-1508.html vendor-advisoryx_refsource_REDHAT
- http://rhn.redhat.com/errata/RHSA-2013-1793.html vendor-advisoryx_refsource_REDHAT
- http://secunia.com/advisories/56338 third-party-advisoryx_refsource_SECUNIA
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV51334 vendor-advisoryx_refsource_AIXAPAR
- http://www-01.ibm.com/support/docview.wss?uid=swg21655201 x_refsource_CONFIRMVendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21655202 x_refsource_CONFIRMVendor Advisory
- https://access.redhat.com/security/cve/CVE-2013-5457 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1027760 Issue Tracking
- https://exchange.xforce.ibmcloud.com/vulnerabilities/88256 vdb-entryx_refsource_XF
- https://nvd.nist.gov/vuln/detail/CVE-2013-5457
- https://www.cve.org/CVERecord?id=CVE-2013-5457
- https://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_November_2013 x_refsource_CONFIRMVendor Advisory
Change history (0)
No recorded changes yet.