Oracle Java SE CVE-2014-6527 Remote Security Vulnerability

Bugtraq ID:	70560
Class:	Unknown
CVE:	CVE-2014-6527
Remote:	Yes
Local:	No
Published:	Oct 14 2014 12:00AM
Updated:	Jan 23 2017 05:07AM
Credit:	Oracle
Vulnerable:	SuSE SUSE Manager for SLE 11 SP2 1.7 SuSE Linux Enterprise Software Development Kit 12 SuSE Linux Enterprise Server 12 Sun JRE (Windows Production Release) 1.7 Sun JRE (Solaris Production Release) 1.7 Sun JRE (Linux Production Release) 1.7 Redhat Enterprise Linux Workstation Supplementary 6 Redhat Enterprise Linux Supplementary 5 server Redhat Enterprise Linux Server Supplementary 6 Redhat Enterprise Linux HPC Node Supplementary 6 Redhat Enterprise Linux Desktop Supplementary 6 Redhat Enterprise Linux Desktop Supplementary 5 client Oracle JRE(Windows Production Release) 1.8 Oracle JRE(Windows Production Release) 1.8.0:update_5 Oracle JRE(Windows Production Release) 1.8.0 Update 20 Oracle JRE(Windows Production Release) 1.7.0_9 Oracle JRE(Windows Production Release) 1.7.0_8 Oracle JRE(Windows Production Release) 1.7.0_51 Oracle JRE(Windows Production Release) 1.7.0_45 Oracle JRE(Windows Production Release) 1.7.0_17 Oracle JRE(Windows Production Release) 1.7.0_13 Oracle JRE(Windows Production Release) 1.7.0_12 Oracle JRE(Windows Production Release) 1.7.0_11 Oracle JRE(Windows Production Release) 1.7.0_10 Oracle JRE(Windows Production Release) 1.7.0:update_60 Oracle JRE(Windows Production Release) 1.7.0 Update 67 Oracle JRE(Solaris Production Release) 1.8 Oracle JRE(Solaris Production Release) 1.8.0:update_5 Oracle JRE(Solaris Production Release) 1.8.0 Update 20 Oracle JRE(Solaris Production Release) 1.7.0_9 Oracle JRE(Solaris Production Release) 1.7.0_8 Oracle JRE(Solaris Production Release) 1.7.0_51 Oracle JRE(Solaris Production Release) 1.7.0_45 Oracle JRE(Solaris Production Release) 1.7.0_40 Oracle JRE(Solaris Production Release) 1.7.0_17 Oracle JRE(Solaris Production Release) 1.7.0_13 Oracle JRE(Solaris Production Release) 1.7.0_11 Oracle JRE(Solaris Production Release) 1.7.0_10 Oracle JRE(Solaris Production Release) 1.7.0:update_60 Oracle JRE(Solaris Production Release) 1.7.0 Update 67 Oracle JRE(Linux Production Release) 1.8.0:update_5 Oracle JRE(Linux Production Release) 1.8.0 Update 20 Oracle JRE(Linux Production Release) 1.8.0 Oracle JRE(Linux Production Release) 1.7.0_9 Oracle JRE(Linux Production Release) 1.7.0_8 Oracle JRE(Linux Production Release) 1.7.0_51 Oracle JRE(Linux Production Release) 1.7.0_45 Oracle JRE(Linux Production Release) 1.7.0_40 Oracle JRE(Linux Production Release) 1.7.0_17 Oracle JRE(Linux Production Release) 1.7.0_11 Oracle JRE(Linux Production Release) 1.7.0_10 Oracle JRE(Linux Production Release) 1.7.0:update_60 Oracle JRE(Linux Production Release) 1.7.0 Update 67 Oracle JRE (Windows Production Release) 1.7.0_7 Oracle JRE (Windows Production Release) 1.7.0_40 Oracle JRE (Windows Production Release) 1.7.0_4 Oracle JRE (Windows Production Release) 1.7.0_21 Oracle JRE (Windows Production Release) 1.7.0_2 Oracle JRE (Solaris Production Release) 1.7.0_7 Oracle JRE (Solaris Production Release) 1.7.0_4 Oracle JRE (Solaris Production Release) 1.7.0_2 Oracle JRE (Linux Production Release) 1.7.0_7 Oracle JRE (Linux Production Release) 1.7.0_4 Oracle JRE (Linux Production Release) 1.7.0_21 Oracle JRE (Linux Production Release) 1.7.0_2 Oracle JRE (Linux Production Release) 1.7.0_13 Oracle JRE (Linux Production Release) 1.7.0_12 Oracle JDK(Windows Production Release) 1.8 Oracle JDK(Windows Production Release) 1.8.0:update_5 Oracle JDK(Windows Production Release) 1.8.0 Update 20 Oracle JDK(Windows Production Release) 1.7.0_9 Oracle JDK(Windows Production Release) 1.7.0_8 Oracle JDK(Windows Production Release) 1.7.0_51 Oracle JDK(Windows Production Release) 1.7.0_45 Oracle JDK(Windows Production Release) 1.7.0_21 Oracle JDK(Windows Production Release) 1.7.0_17 Oracle JDK(Windows Production Release) 1.7.0_13 Oracle JDK(Windows Production Release) 1.7.0_12 Oracle JDK(Windows Production Release) 1.7.0_11 Oracle JDK(Windows Production Release) 1.7.0_10 Oracle JDK(Windows Production Release) 1.7.0:update_60 Oracle JDK(Windows Production Release) 1.7.0 Update 67 Oracle JDK(Solaris Production Release) 1.8 Oracle JDK(Solaris Production Release) 1.8.0:update_5 Oracle JDK(Solaris Production Release) 1.8.0 Update 20 Oracle JDK(Solaris Production Release) 1.7.0_9 Oracle JDK(Solaris Production Release) 1.7.0_8 Oracle JDK(Solaris Production Release) 1.7.0_51 Oracle JDK(Solaris Production Release) 1.7.0_45 Oracle JDK(Solaris Production Release) 1.7.0_40 Oracle JDK(Solaris Production Release) 1.7.0_21 Oracle JDK(Solaris Production Release) 1.7.0_13 Oracle JDK(Solaris Production Release) 1.7.0_12 Oracle JDK(Solaris Production Release) 1.7.0:update_60 Oracle JDK(Solaris Production Release) 1.7.0 Update 67 Oracle JDK(Linux Production Release) 1.8.0:update_5 Oracle JDK(Linux Production Release) 1.8.0 Update 20 Oracle JDK(Linux Production Release) 1.8.0 Oracle JDK(Linux Production Release) 1.7.0_9 Oracle JDK(Linux Production Release) 1.7.0_8 Oracle JDK(Linux Production Release) 1.7.0_51 Oracle JDK(Linux Production Release) 1.7.0_45 Oracle JDK(Linux Production Release) 1.7.0_40 Oracle JDK(Linux Production Release) 1.7.0_21 Oracle JDK(Linux Production Release) 1.7.0_17 Oracle JDK(Linux Production Release) 1.7.0_11 Oracle JDK(Linux Production Release) 1.7.0_10 Oracle JDK(Linux Production Release) 1.7.0:update_60 Oracle JDK(Linux Production Release) 1.7.0 Update 67 Oracle JDK(Linux Production Release) 1.6.0_43 Oracle JDK (Windows Production Release) 1.7 Oracle JDK (Windows Production Release) 1.7.0_7 Oracle JDK (Windows Production Release) 1.7.0_40 Oracle JDK (Windows Production Release) 1.7.0_4 Oracle JDK (Windows Production Release) 1.7.0_2 Oracle JDK (Solaris Production Release) 1.7 Oracle JDK (Solaris Production Release) 1.7.0_7 Oracle JDK (Solaris Production Release) 1.7.0_4 Oracle JDK (Solaris Production Release) 1.7.0_2 Oracle JDK (Solaris Production Release) 1.7.0_11 Oracle JDK (Solaris Production Release) 1.7.0_10 Oracle JDK (Linux Production Release) 1.7 Oracle JDK (Linux Production Release) 1.7.0_7 Oracle JDK (Linux Production Release) 1.7.0_4 Oracle JDK (Linux Production Release) 1.7.0_2 Oracle JDK (Linux Production Release) 1.7.0_13 Oracle JDK (Linux Production Release) 1.7.0_12 IBM WebSphere Real Time 3 SR7 FP1 IBM Virtual Storage Console for VMware vSphere 4.2.1 IBM Virtual Storage Console for VMware vSphere 5.0 IBM Vios 2.2 IBM Tivoli Storage Productivity Center 5.2.2 IBM Tivoli Storage Productivity Center 5.2.1 0 IBM Tivoli Storage Productivity Center 5.2 IBM Tivoli Storage Productivity Center 5.1.1 3 IBM Tivoli Storage Productivity Center 5.1.1 IBM Tivoli Storage Productivity Center 5.1 IBM Tivoli Storage Productivity Center 4.2.2 143 IBM Tivoli Storage Productivity Center 4.2.2 IBM Tivoli Storage Productivity Center 4.1.1 IBM Tivoli Storage Productivity Center 5.2.4.1 IBM Tivoli Storage Productivity Center 5.2.4 IBM Tivoli Storage Productivity Center 5.2.3 IBM Tivoli Storage Productivity Center 5.2.1.1 IBM Tivoli Storage Productivity Center 5.1.1.5 IBM Tivoli Storage Productivity Center 5.1.1.4 IBM Tivoli Storage Productivity Center 5.1.1.2 IBM Tivoli Storage Productivity Center 5.1.1.1 IBM Tivoli Storage Productivity Center 5.1.1.0 IBM Tivoli Storage Productivity Center 4.2.2.184 IBM Tivoli Storage Productivity Center 4.2.2.178 IBM Tivoli Storage Productivity Center 4.2.2.177 IBM Tivoli Storage Productivity Center 4.2.2.145 IBM Tivoli Storage Productivity Center 4.2.1.185 IBM Tivoli Storage Productivity Center 4.2.1 IBM Tivoli Storage Productivity Center 4.2.0 IBM Tivoli Storage Productivity Center 4.1 IBM SnapManager for SAP 3.3.1 IBM SnapManager for SAP 3.3 IBM SnapManager for SAP 3.2 IBM SnapManager for Oracle 3.3.1 IBM SnapManager for Oracle 3.3 IBM SnapManager for Oracle 3.2 IBM Runtimes for Java Technology 7.1 IBM Runtimes for Java Technology 7.0 IBM Runtimes for Java Technology 6.1 IBM Runtimes for Java Technology 6.0 IBM Runtimes for Java Technology 5.0 IBM NS OnCommand Core Package 5.2R1 IBM NS OnCommand Core Package 5.2.1P2 IBM NS OnCommand Core Package 5.2.1P1 IBM NS OnCommand Core Package 5.2 IBM N series VASA Provider 1.0.1 IBM N series VASA Provider 1.0 IBM AIX 7.1 IBM AIX 6.1 IBM AIX 5.3 HP HP-UX B.11.31 HP HP-UX B.11.23 Gentoo Linux EMC ViPR SRM 3.6.0 EMC M&R 6.5
Not Vulnerable:	IBM WebSphere Real Time 3 SR8 IBM Tivoli Storage Productivity Center 5.2.5 IBM Tivoli Storage Productivity Center 5.1.1.6 EMC ViPR SRM 3.6.1 EMC M&R 6.5u1

Oracle Java SE CVE-2014-6527 Remote Security Vulnerability

Oracle Java SE is prone to a remote security vulnerability.

The vulnerability can be exploited over multiple protocols. This issue affects the 'Deployment' sub-component.

This vulnerability affects the following supported versions:
Java SE 7u67, Java SE 8u20

Oracle Java SE CVE-2014-6527 Remote Security Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Oracle Java SE CVE-2014-6527 Remote Security Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Oracle Java SE CVE-2014-6527 Remote Security Vulnerability

References:

• Oracle Java Homepage (Oracle)
  
• ESA-2015-004: EMC M&R (Watch4Net) Multiple Vulnerabilities (EMC)
  
• HPSBUX03218 SSRT101770 rev.1 - HP-UX running Java7, Remote Unauthorized Access, (HP)
  
• IBM SECURITY ADVISORY (IBM)
  
• Multiple vulnerabilities in current releases of the IBM SDK, Java Technology Edi (IBM)
  
• Multiple vulnerabilities in IBM Java SDK affect Tivoli Storage Productivity Cent (IBM)
  
• Oracle Critical Patch Update Advisory - October 2014 (Oracle)
  
• Security Bulletin: Multiple vulnerabilities in current releases of IBM? WebSpher (IBM)
  
• ssg1S1009593:October 2014 Java Runtime Environment (JRE) Vulnerabilities in Mult (IBM)