Oracle Java SE CVE-2014-6468 Local Security Vulnerability
BID:70488
Info
Oracle Java SE CVE-2014-6468 Local Security Vulnerability
| Bugtraq ID: | 70488 |
| Class: | Unknown |
| CVE: |
CVE-2014-6468 |
| Remote: | No |
| Local: | Yes |
| Published: | Oct 14 2014 12:00AM |
| Updated: | Jan 23 2017 03:07AM |
| Credit: | Oracle |
| Vulnerable: |
Redhat Enterprise Linux Workstation Optional 6 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server Optional 6 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux HPC Node Optional 6 Redhat Enterprise Linux HPC Node 6 Redhat Enterprise Linux Desktop Optional 6 Redhat Enterprise Linux Desktop 6 Oracle JRE(Windows Production Release) 1.8 Oracle JRE(Windows Production Release) 1.8.0:update_5 Oracle JRE(Windows Production Release) 1.8.0 Update 20 Oracle JRE(Solaris Production Release) 1.8 Oracle JRE(Solaris Production Release) 1.8.0:update_5 Oracle JRE(Solaris Production Release) 1.8.0 Update 20 Oracle JRE(Linux Production Release) 1.8.0:update_5 Oracle JRE(Linux Production Release) 1.8.0 Update 20 Oracle JRE(Linux Production Release) 1.8.0 Oracle JDK(Windows Production Release) 1.8 Oracle JDK(Windows Production Release) 1.8.0:update_5 Oracle JDK(Windows Production Release) 1.8.0 Update 20 Oracle JDK(Solaris Production Release) 1.8 Oracle JDK(Solaris Production Release) 1.8.0:update_5 Oracle JDK(Solaris Production Release) 1.8.0 Update 20 Oracle JDK(Linux Production Release) 1.8.0:update_5 Oracle JDK(Linux Production Release) 1.8.0 Update 20 Oracle JDK(Linux Production Release) 1.8.0 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 IBM WebSphere MQ 7.0.1 IBM WebSphere MQ 8.0 IBM WebSphere MQ 7.5 IBM WebSphere MQ 7.1 IBM Virtual Storage Console for VMware vSphere 4.2.1 IBM Virtual Storage Console for VMware vSphere 5.0 IBM Tivoli Workload Scheduler z/OS Connector 8.6 IBM Tivoli Workload Scheduler z/OS Connector 8.5.1 IBM Tivoli Workload Scheduler z/OS Connector 8.5 IBM Tivoli Workload Scheduler Distributed 8.6 IBM Tivoli Workload Scheduler Distributed 8.5.1 IBM Tivoli Workload Scheduler Distributed 8.5 FP05 IBM Tivoli Workload Scheduler Distributed 8.5 IBM Tivoli Workload Scheduler Distributed 8.4 FP07 IBM Tivoli Workload Scheduler Distributed 8.4 IBM Tivoli Workload Scheduler Distributed 8.6.0 FP03 IBM Tivoli Workload Scheduler Distributed 8.5.1 FP05 IBM Tivoli Storage Productivity Center 5.2.2 IBM Tivoli Storage Productivity Center 5.2.1 0 IBM Tivoli Storage Productivity Center 5.2 IBM Tivoli Storage Productivity Center 5.1.1 3 IBM Tivoli Storage Productivity Center 5.1.1 IBM Tivoli Storage Productivity Center 5.1 IBM Tivoli Storage Productivity Center 4.2.2 143 IBM Tivoli Storage Productivity Center 4.2.2 IBM Tivoli Storage Productivity Center 4.1.1 IBM Tivoli Storage Productivity Center 5.2.4.1 IBM Tivoli Storage Productivity Center 5.2.4 IBM Tivoli Storage Productivity Center 5.2.3 IBM Tivoli Storage Productivity Center 5.2.1.1 IBM Tivoli Storage Productivity Center 5.1.1.5 IBM Tivoli Storage Productivity Center 5.1.1.4 IBM Tivoli Storage Productivity Center 5.1.1.2 IBM Tivoli Storage Productivity Center 5.1.1.1 IBM Tivoli Storage Productivity Center 5.1.1.0 IBM Tivoli Storage Productivity Center 4.2.2.184 IBM Tivoli Storage Productivity Center 4.2.2.178 IBM Tivoli Storage Productivity Center 4.2.2.177 IBM Tivoli Storage Productivity Center 4.2.2.145 IBM Tivoli Storage Productivity Center 4.2.1.185 IBM Tivoli Storage Productivity Center 4.2.1 IBM Tivoli Storage Productivity Center 4.2.0 IBM Tivoli Storage Productivity Center 4.1 IBM Tivoli Dynamic Workload Console 8.5.1 IBM Tivoli Dynamic Workload Console 8.5 IBM Tivoli Dynamic Workload Console 8.4 IBM Tivoli Dynamic Workload Console 8.6.0.0 IBM Systems Director Storage Control 4.2.6.0 IBM Systems Director Storage Control 4.2.4.1 IBM Systems Director Storage Control 4.2.4.0 IBM Systems Director Storage Control 4.2.3.2 IBM Systems Director Storage Control 4.2.3.1 IBM Systems Director Storage Control 4.2.3.0 IBM Systems Director Storage Control 4.2.2.1 IBM Systems Director Storage Control 4.2.2.0 IBM Systems Director Storage Control 4.2.1.1 IBM Systems Director Storage Control 4.2.1.0 IBM Systems Director Common Agent for Windows 6.3.5 IBM Systems Director Common Agent for Windows 6.3.4 IBM Systems Director Common Agent for Windows 6.3.3 IBM Systems Director Common Agent for Windows 6.3.2 IBM Systems Director Common Agent for Windows 6.3.1 IBM Systems Director Common Agent for Linux 6.3.5 IBM Systems Director Common Agent for Linux 6.3.4 IBM Systems Director Common Agent for Linux 6.3.3 IBM Systems Director Common Agent for Linux 6.3.2 IBM Systems Director Common Agent for Linux 6.3.1 IBM Systems Director 6.3.2 0 IBM Systems Director 6.3.5.0 IBM Systems Director 6.3.3.1 IBM Systems Director 6.3.3.0 IBM Systems Director 6.3.2.2 IBM Systems Director 6.3.2.1 IBM Systems Director 6.3.1.1 IBM Systems Director 6.3.1.0 IBM Systems Director 6.3.0.0 IBM Systems Director 6.2.1.2 IBM Systems Director 6.2.1.0 IBM Sterling Connect:Direct for UNIX 4.2 IBM Sterling Connect:Direct for UNIX 4.1 IBM Sterling Connect:Direct for UNIX 4.0 IBM SnapManager for SAP 3.3.1 IBM SnapManager for SAP 3.3 IBM SnapManager for SAP 3.2 IBM SnapManager for Oracle 3.3.1 IBM SnapManager for Oracle 3.3 IBM SnapManager for Oracle 3.2 IBM RRDI 5.0.2 IBM RRDI 5.0.1 IBM RRDI 2.0.6 IBM RRDI 2.0.5 IBM RRDI 2.0.4 IBM RRDI 2.0.3 IBM RRDI 2.0.1 IBM RRDI 5.0 IBM RRDI 2.0.0.1 IBM RRDI 2.0 IBM Rational Insight 1.1.1 3 IBM Rational Insight 1.1.1 2 IBM Rational Insight 1.1.1 1 IBM Rational Insight 1.1.1 IBM Rational Insight 1.1.1.6 IBM Rational Insight 1.1.1.5 IBM Rational Insight 1.1.1.4 IBM Rational Insight 1.1 IBM NS OnCommand Core Package 5.2R1 IBM NS OnCommand Core Package 5.2.1P2 IBM NS OnCommand Core Package 5.2.1P1 IBM NS OnCommand Core Package 5.2 IBM N series VASA Provider 1.0.1 IBM N series VASA Provider 1.0 IBM MQ Appliance M2000 0 IBM Flex System Manager 1.3.2 0 IBM Flex System Manager 1.3.1.0 IBM Flex System Manager 1.3.0.0 IBM Flex System Manager 1.2.1.0 IBM Flex System Manager 1.2.0.0 IBM Flex System Manager 1.1.0.0 IBM DB2 Recovery Expert 4.1.0.1 IBM DB2 Recovery Expert 4.1.0 IBM DB2 Recovery Expert 3.1.0 Gentoo Linux EMC ViPR SRM 3.6.0 EMC M&R 6.5 |
| Not Vulnerable: |
IBM Tivoli Storage Productivity Center 5.2.5 IBM Tivoli Storage Productivity Center 5.1.1.6 EMC ViPR SRM 3.6.1 EMC M&R 6.5u1 |
Discussion
Oracle Java SE CVE-2014-6468 Local Security Vulnerability
Oracle Java SE is prone to a local security vulnerability.
This issue affects the 'Hotspot' sub-component.
This vulnerability affects the following supported versions:
Java SE 8u20
Oracle Java SE is prone to a local security vulnerability.
This issue affects the 'Hotspot' sub-component.
This vulnerability affects the following supported versions:
Java SE 8u20
Exploit / POC
Oracle Java SE CVE-2014-6468 Local Security Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Oracle Java SE CVE-2014-6468 Local Security Vulnerability
Solution:
Vendor updates are available. Please contact the vendor for more information.
Solution:
Vendor updates are available. Please contact the vendor for more information.
References
Oracle Java SE CVE-2014-6468 Local Security Vulnerability
References:
References:
- Oracle Java Homepage (Oracle)
- ESA-2015-004: EMC M&R (Watch4Net) Multiple Vulnerabilities (EMC)
- Multiple vulnerabilities in IBM Java SDK affect Tivoli Storage Productivity Cent (IBM)
- Oracle Critical Patch Update Advisory - October 2014 (Oracle)
- Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM DB2 R (IBM)
- Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Flex (IBM)
- Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Sterl (IBM)
- Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affects IBM WebS (IBM)
- Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Rational Insi (IBM)
- Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Rational Repo (IBM)
- Security Bulletin: Multiple vulnerabilities in Oracle Java SE Runtime Environmen (IBM)
- Security Bulletin: SSLv3 Vulnerability and multiple vulnerabilities in OpenSSL a (IBM)
- Security Bulletin: Tivoli Workload Scheduler Distributed Potential multiple Secu (IBM)
- ssg1S1009593:October 2014 Java Runtime Environment (JRE) Vulnerabilities in Mult (IBM)