Oracle Java SE CVE-2014-6519 Remote Security Vulnerability
BID:70570
Info
Oracle Java SE CVE-2014-6519 Remote Security Vulnerability
| Bugtraq ID: | 70570 |
| Class: | Unknown |
| CVE: |
CVE-2014-6519 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 14 2014 12:00AM |
| Updated: | Jan 23 2017 12:09AM |
| Credit: | Oracle |
| Vulnerable: |
Sun JRE (Windows Production Release) 1.7 Sun JRE (Solaris Production Release) 1.7 Sun JRE (Linux Production Release) 1.7 Redhat Enterprise Linux Workstation Optional 6 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server Optional 6 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux HPC Node Optional 6 Redhat Enterprise Linux HPC Node 6 Redhat Enterprise Linux Desktop Optional 6 Redhat Enterprise Linux Desktop 6 Redhat Enterprise Linux Desktop 5 client Redhat Enterprise Linux 5 Server Oracle JRE(Windows Production Release) 1.8 Oracle JRE(Windows Production Release) 1.8.0:update_5 Oracle JRE(Windows Production Release) 1.8.0 Update 20 Oracle JRE(Windows Production Release) 1.7.0_9 Oracle JRE(Windows Production Release) 1.7.0_8 Oracle JRE(Windows Production Release) 1.7.0_51 Oracle JRE(Windows Production Release) 1.7.0_45 Oracle JRE(Windows Production Release) 1.7.0_17 Oracle JRE(Windows Production Release) 1.7.0_13 Oracle JRE(Windows Production Release) 1.7.0_12 Oracle JRE(Windows Production Release) 1.7.0_11 Oracle JRE(Windows Production Release) 1.7.0_10 Oracle JRE(Windows Production Release) 1.7.0:update_60 Oracle JRE(Windows Production Release) 1.7.0 Update 67 Oracle JRE(Solaris Production Release) 1.8 Oracle JRE(Solaris Production Release) 1.8.0:update_5 Oracle JRE(Solaris Production Release) 1.8.0 Update 20 Oracle JRE(Solaris Production Release) 1.7.0_9 Oracle JRE(Solaris Production Release) 1.7.0_8 Oracle JRE(Solaris Production Release) 1.7.0_51 Oracle JRE(Solaris Production Release) 1.7.0_45 Oracle JRE(Solaris Production Release) 1.7.0_40 Oracle JRE(Solaris Production Release) 1.7.0_17 Oracle JRE(Solaris Production Release) 1.7.0_13 Oracle JRE(Solaris Production Release) 1.7.0_11 Oracle JRE(Solaris Production Release) 1.7.0_10 Oracle JRE(Solaris Production Release) 1.7.0:update_60 Oracle JRE(Solaris Production Release) 1.7.0 Update 67 Oracle JRE(Linux Production Release) 1.8.0:update_5 Oracle JRE(Linux Production Release) 1.8.0 Update 20 Oracle JRE(Linux Production Release) 1.8.0 Oracle JRE(Linux Production Release) 1.7.0_9 Oracle JRE(Linux Production Release) 1.7.0_8 Oracle JRE(Linux Production Release) 1.7.0_51 Oracle JRE(Linux Production Release) 1.7.0_45 Oracle JRE(Linux Production Release) 1.7.0_40 Oracle JRE(Linux Production Release) 1.7.0_17 Oracle JRE(Linux Production Release) 1.7.0_11 Oracle JRE(Linux Production Release) 1.7.0_10 Oracle JRE(Linux Production Release) 1.7.0:update_60 Oracle JRE(Linux Production Release) 1.7.0 Update 67 Oracle JRE (Windows Production Release) 1.7.0_7 Oracle JRE (Windows Production Release) 1.7.0_40 Oracle JRE (Windows Production Release) 1.7.0_4 Oracle JRE (Windows Production Release) 1.7.0_21 Oracle JRE (Windows Production Release) 1.7.0_2 Oracle JRE (Solaris Production Release) 1.7.0_7 Oracle JRE (Solaris Production Release) 1.7.0_4 Oracle JRE (Solaris Production Release) 1.7.0_2 Oracle JRE (Linux Production Release) 1.7.0_7 Oracle JRE (Linux Production Release) 1.7.0_4 Oracle JRE (Linux Production Release) 1.7.0_21 Oracle JRE (Linux Production Release) 1.7.0_2 Oracle JRE (Linux Production Release) 1.7.0_13 Oracle JRE (Linux Production Release) 1.7.0_12 Oracle JRE 1.7.0 Update 60 Oracle JDK(Windows Production Release) 1.8 Oracle JDK(Windows Production Release) 1.8.0:update_5 Oracle JDK(Windows Production Release) 1.8.0 Update 20 Oracle JDK(Windows Production Release) 1.7.0_9 Oracle JDK(Windows Production Release) 1.7.0_8 Oracle JDK(Windows Production Release) 1.7.0_51 Oracle JDK(Windows Production Release) 1.7.0_45 Oracle JDK(Windows Production Release) 1.7.0_21 Oracle JDK(Windows Production Release) 1.7.0_17 Oracle JDK(Windows Production Release) 1.7.0_13 Oracle JDK(Windows Production Release) 1.7.0_12 Oracle JDK(Windows Production Release) 1.7.0_11 Oracle JDK(Windows Production Release) 1.7.0_10 Oracle JDK(Windows Production Release) 1.7.0:update_60 Oracle JDK(Windows Production Release) 1.7.0 Update 67 Oracle JDK(Solaris Production Release) 1.8 Oracle JDK(Solaris Production Release) 1.8.0:update_5 Oracle JDK(Solaris Production Release) 1.8.0 Update 20 Oracle JDK(Solaris Production Release) 1.7.0_9 Oracle JDK(Solaris Production Release) 1.7.0_8 Oracle JDK(Solaris Production Release) 1.7.0_51 Oracle JDK(Solaris Production Release) 1.7.0_45 Oracle JDK(Solaris Production Release) 1.7.0_40 Oracle JDK(Solaris Production Release) 1.7.0_21 Oracle JDK(Solaris Production Release) 1.7.0_13 Oracle JDK(Solaris Production Release) 1.7.0_12 Oracle JDK(Solaris Production Release) 1.7.0:update_60 Oracle JDK(Solaris Production Release) 1.7.0 Update 67 Oracle JDK(Linux Production Release) 1.8.0:update_5 Oracle JDK(Linux Production Release) 1.8.0 Update 20 Oracle JDK(Linux Production Release) 1.8.0 Oracle JDK(Linux Production Release) 1.7.0_9 Oracle JDK(Linux Production Release) 1.7.0_8 Oracle JDK(Linux Production Release) 1.7.0_51 Oracle JDK(Linux Production Release) 1.7.0_45 Oracle JDK(Linux Production Release) 1.7.0_40 Oracle JDK(Linux Production Release) 1.7.0_21 Oracle JDK(Linux Production Release) 1.7.0_17 Oracle JDK(Linux Production Release) 1.7.0_11 Oracle JDK(Linux Production Release) 1.7.0_10 Oracle JDK(Linux Production Release) 1.7.0:update_60 Oracle JDK(Linux Production Release) 1.7.0 Update 67 Oracle JDK(Linux Production Release) 1.6.0_43 Oracle JDK (Windows Production Release) 1.7 Oracle JDK (Windows Production Release) 1.7.0_7 Oracle JDK (Windows Production Release) 1.7.0_40 Oracle JDK (Windows Production Release) 1.7.0_4 Oracle JDK (Windows Production Release) 1.7.0_2 Oracle JDK (Solaris Production Release) 1.7 Oracle JDK (Solaris Production Release) 1.7.0_7 Oracle JDK (Solaris Production Release) 1.7.0_4 Oracle JDK (Solaris Production Release) 1.7.0_2 Oracle JDK (Solaris Production Release) 1.7.0_11 Oracle JDK (Solaris Production Release) 1.7.0_10 Oracle JDK (Linux Production Release) 1.7 Oracle JDK (Linux Production Release) 1.7.0_7 Oracle JDK (Linux Production Release) 1.7.0_4 Oracle JDK (Linux Production Release) 1.7.0_2 Oracle JDK (Linux Production Release) 1.7.0_13 Oracle JDK (Linux Production Release) 1.7.0_12 Oracle JDK 1.7.0 Update 60 Oracle Java SE Embedded 7u60 Oracle Enterprise Linux 7 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 Oracle Enterprise Linux 5 Mandriva Business Server 1 X86 64 Mandriva Business Server 1 IBM Virtual Storage Console for VMware vSphere 4.2.1 IBM Virtual Storage Console for VMware vSphere 5.0 IBM Tivoli Storage Productivity Center 5.2.2 IBM Tivoli Storage Productivity Center 5.2.1 0 IBM Tivoli Storage Productivity Center 5.2 IBM Tivoli Storage Productivity Center 5.1.1 3 IBM Tivoli Storage Productivity Center 5.1.1 IBM Tivoli Storage Productivity Center 5.1 IBM Tivoli Storage Productivity Center 4.2.2 143 IBM Tivoli Storage Productivity Center 4.2.2 IBM Tivoli Storage Productivity Center 4.1.1 IBM Tivoli Storage Productivity Center 5.2.4.1 IBM Tivoli Storage Productivity Center 5.2.4 IBM Tivoli Storage Productivity Center 5.2.3 IBM Tivoli Storage Productivity Center 5.2.1.1 IBM Tivoli Storage Productivity Center 5.1.1.5 IBM Tivoli Storage Productivity Center 5.1.1.4 IBM Tivoli Storage Productivity Center 5.1.1.2 IBM Tivoli Storage Productivity Center 5.1.1.1 IBM Tivoli Storage Productivity Center 5.1.1.0 IBM Tivoli Storage Productivity Center 4.2.2.184 IBM Tivoli Storage Productivity Center 4.2.2.178 IBM Tivoli Storage Productivity Center 4.2.2.177 IBM Tivoli Storage Productivity Center 4.2.2.145 IBM Tivoli Storage Productivity Center 4.2.1.185 IBM Tivoli Storage Productivity Center 4.2.1 IBM Tivoli Storage Productivity Center 4.2.0 IBM Tivoli Storage Productivity Center 4.1 IBM Systems Director Storage Control 4.2.6.0 IBM Systems Director Storage Control 4.2.4.1 IBM Systems Director Storage Control 4.2.4.0 IBM Systems Director Storage Control 4.2.3.2 IBM Systems Director Storage Control 4.2.3.1 IBM Systems Director Storage Control 4.2.3.0 IBM Systems Director Storage Control 4.2.2.1 IBM Systems Director Storage Control 4.2.2.0 IBM Systems Director Storage Control 4.2.1.1 IBM Systems Director Storage Control 4.2.1.0 IBM Systems Director Common Agent for Windows 6.3.5 IBM Systems Director Common Agent for Windows 6.3.4 IBM Systems Director Common Agent for Windows 6.3.3 IBM Systems Director Common Agent for Windows 6.3.2 IBM Systems Director Common Agent for Windows 6.3.1 IBM Systems Director Common Agent for Linux 6.3.5 IBM Systems Director Common Agent for Linux 6.3.4 IBM Systems Director Common Agent for Linux 6.3.3 IBM Systems Director Common Agent for Linux 6.3.2 IBM Systems Director Common Agent for Linux 6.3.1 IBM Systems Director 6.3.2 0 IBM Systems Director 6.3.5.0 IBM Systems Director 6.3.3.1 IBM Systems Director 6.3.3.0 IBM Systems Director 6.3.2.2 IBM Systems Director 6.3.2.1 IBM Systems Director 6.3.1.1 IBM Systems Director 6.3.1.0 IBM Systems Director 6.3.0.0 IBM Systems Director 6.2.1.2 IBM Systems Director 6.2.1.0 IBM SnapManager for SAP 3.3.1 IBM SnapManager for SAP 3.3 IBM SnapManager for SAP 3.2 IBM SnapManager for Oracle 3.3.1 IBM SnapManager for Oracle 3.3 IBM SnapManager for Oracle 3.2 IBM NS OnCommand Core Package 5.2R1 IBM NS OnCommand Core Package 5.2.1P2 IBM NS OnCommand Core Package 5.2.1P1 IBM NS OnCommand Core Package 5.2 IBM N series VASA Provider 1.0.1 IBM N series VASA Provider 1.0 IBM Flex System Manager 1.3.2 0 IBM Flex System Manager 1.3.1.0 IBM Flex System Manager 1.3.0.0 IBM Flex System Manager 1.2.1.0 IBM Flex System Manager 1.2.0.0 IBM Flex System Manager 1.1.0.0 HP HP-UX B.11.31 HP HP-UX B.11.23 Gentoo Linux EMC ViPR SRM 3.6.0 EMC M&R 6.5 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 CentOS CentOS 5 |
| Not Vulnerable: |
IBM Tivoli Storage Productivity Center 5.2.5 IBM Tivoli Storage Productivity Center 5.1.1.6 EMC ViPR SRM 3.6.1 EMC M&R 6.5u1 |
Discussion
Oracle Java SE CVE-2014-6519 Remote Security Vulnerability
Oracle Java SE is prone to a remote vulnerability in Java SE, Java SE Embedded.
The vulnerability can be exploited over multiple protocols. This issue affects the 'Hotspot' sub-component.
This vulnerability affects the following supported versions:
Java SE 7u67, Java SE 8u20, Java SE Embedded 7u60
Oracle Java SE is prone to a remote vulnerability in Java SE, Java SE Embedded.
The vulnerability can be exploited over multiple protocols. This issue affects the 'Hotspot' sub-component.
This vulnerability affects the following supported versions:
Java SE 7u67, Java SE 8u20, Java SE Embedded 7u60
Exploit / POC
Oracle Java SE CVE-2014-6519 Remote Security Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Oracle Java SE CVE-2014-6519 Remote Security Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Oracle Java SE CVE-2014-6519 Remote Security Vulnerability
References:
References:
- Oracle Java Homepage (Oracle)
- ESA-2015-004: EMC M&R (Watch4Net) Multiple Vulnerabilities (EMC)
- HPSBUX03218 SSRT101770 rev.1 - HP-UX running Java7, Remote Unauthorized Access, (HP)
- Multiple vulnerabilities in IBM Java SDK affect Tivoli Storage Productivity Cent (IBM)
- Oracle Critical Patch Update Advisory - October 2014 (Oracle)
- Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Flex (IBM)
- Security Bulletin: SSLv3 Vulnerability and multiple vulnerabilities in OpenSSL a (IBM)
- ssg1S1009593:October 2014 Java Runtime Environment (JRE) Vulnerabilities in Mult (IBM)