CVE-2013-5893
Summary
| CVE | CVE-2013-5893 |
|---|---|
| State | PUBLISHED |
| Assigner | oracle |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2014-01-15 16:08:06 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | Unspecified vulnerability in Oracle Java SE 7u45 and Java SE Embedded 7u45, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to improper handling of methods in MethodHandles in HotSpot JVM, which allows attackers to escape the sandbox. |
Risk And Classification
Primary CVSS: v2.0 9.3 from [email protected]
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS: 0.069800000 probability, percentile 0.914820000 (date 2026-05-01)
Problem Types: NVD-CWE-noinfo | n/a
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
MediumAuthentication
NoneConfidentiality
CompleteIntegrity
CompleteAvailability
CompleteAV:N/AC:M/Au:N/C:C/I:C/A:C
NVD Known Affected Configurations (CPE 2.3)
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Oracle Critical Patch Update - January 2014 | af854a3a-2127-422b-91ae-364da2661108 | www.oracle.com | Vendor Advisory |
| jdk7u/jdk7u/hotspot: 839100e42498 | af854a3a-2127-422b-91ae-364da2661108 | hg.openjdk.java.net | |
| Red Hat Customer Portal | af854a3a-2127-422b-91ae-364da2661108 | rhn.redhat.com | |
| Security Advisory SA56486 - Oracle Java SE Embedded Multiple Vulnerabilities - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| '[security bulletin] HPSBUX02972 SSRT101454 rev.1 - HP-UX Running Java7, Remote Unauthorized Access, ' - MARC | af854a3a-2127-422b-91ae-364da2661108 | marc.info | |
| About Secunia Research | Flexera | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Red Hat Customer Portal | af854a3a-2127-422b-91ae-364da2661108 | rhn.redhat.com | |
| Security Advisory SA56535 - Red Hat update for java-1.7.0-oracle - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Document Display | HPE Support Center | af854a3a-2127-422b-91ae-364da2661108 | h20566.www2.hpe.com | |
| Red Hat Customer Portal | af854a3a-2127-422b-91ae-364da2661108 | rhn.redhat.com | |
| osvdb.org/102000 | af854a3a-2127-422b-91ae-364da2661108 | osvdb.org | |
| Oracle Java Multiple Flaws Let Remote Users Execute Arbitrary Code, Access and Modify Data, and Deny Service - SecurityTracker | af854a3a-2127-422b-91ae-364da2661108 | www.securitytracker.com | |
| openSUSE-SU-2014:0180-1: moderate: update for java-1_7_0-openjdk | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | |
| Security Advisory SA56432 - Red Hat update for java-1.7.0-openjdk - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| RETIRED: Oracle January 2014 Critical Patch Update Multiple Vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| Bug 1051549 – CVE-2013-5893 OpenJDK: JVM method processing issues (Libraries, 8029507) | af854a3a-2127-422b-91ae-364da2661108 | bugzilla.redhat.com | |
| openSUSE-SU-2014:0174-1: moderate: update for java-1_7_0-openjdk | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | |
| openSUSE-SU-2014:0177-1: moderate: update for java-1_7_0-openjdk | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | |
| USN-2089-1: OpenJDK 7 vulnerabilities | Ubuntu | af854a3a-2127-422b-91ae-364da2661108 | www.ubuntu.com | |
| Oracle Java SE CVE-2013-5893 Remote Security Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.