The remote host is affected by the vulnerability described in GLSA-201401-30 (Oracle JRE/JDK: Multiple vulnerabilities)

    Multiple vulnerabilities have been reported in the Oracle Java       implementation. Please review the CVE identifiers referenced below for       details.
  Impact :

    An unauthenticated, remote attacker could exploit these vulnerabilities       to execute arbitrary code.
      Furthermore, a local or remote attacker could exploit these       vulnerabilities to cause unspecified impact, possibly including remote       execution of arbitrary code.
  Workaround :

    There is no known workaround at this time.

The version of Oracle (formerly Sun) Java SE or Java for Business installed on the remote host is earlier than or equal to 7 Update 21, 6 Update 45 or 5 Update 45.  It is, therefore, potentially affected by security issues in the following components :

  - 2D
  - AWT
  - CORBA
  - Deployment
  - Hotspot
  - Install
  - JDBC
  - JMX
  - Libraries
  - Networking
  - Serialization
  - Serviceability
  - Sound

Updated java-1.7.0-openjdk packages that fix various security issues are now available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

These packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Software Development Kit.

Multiple flaws were discovered in the ImagingLib and the image attribute, channel, layout and raster processing in the 2D component.
An untrusted Java application or applet could possibly use these flaws to trigger Java Virtual Machine memory corruption. (CVE-2013-2470, CVE-2013-2471, CVE-2013-2472, CVE-2013-2473, CVE-2013-2463, CVE-2013-2465, CVE-2013-2469)

Integer overflow flaws were found in the way AWT processed certain input. An attacker could use these flaws to execute arbitrary code with the privileges of the user running an untrusted Java applet or application. (CVE-2013-2459)

Multiple improper permission check issues were discovered in the Sound, JDBC, Libraries, JMX, and Serviceability components in OpenJDK.
An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions. (CVE-2013-2448, CVE-2013-2454, CVE-2013-2458, CVE-2013-2457, CVE-2013-2453, CVE-2013-2460)

Multiple flaws in the Serialization, Networking, Libraries and CORBA components can be exploited by an untrusted Java application or applet to gain access to potentially sensitive information. (CVE-2013-2456, CVE-2013-2447, CVE-2013-2455, CVE-2013-2452, CVE-2013-2443, CVE-2013-2446)

It was discovered that the Hotspot component did not properly handle out-of-memory errors. An untrusted Java application or applet could possibly use these flaws to terminate the Java Virtual Machine.
(CVE-2013-2445)

It was discovered that the AWT component did not properly manage certain resources and that the ObjectStreamClass of the Serialization component did not properly handle circular references. An untrusted Java application or applet could possibly use these flaws to cause a denial of service. (CVE-2013-2444, CVE-2013-2450)

It was discovered that the Libraries component contained certain errors related to XML security and the class loader. A remote attacker could possibly exploit these flaws to bypass intended security mechanisms or disclose potentially sensitive information and cause a denial of service. (CVE-2013-2407, CVE-2013-2461)

It was discovered that JConsole did not properly inform the user when establishing an SSL connection failed. An attacker could exploit this flaw to gain access to potentially sensitive information.
(CVE-2013-2412)

It was discovered that GnomeFileTypeDetector did not check for read permissions when accessing files. An untrusted Java application or applet could possibly use this flaw to disclose potentially sensitive information. (CVE-2013-2449)

It was found that documentation generated by Javadoc was vulnerable to a frame injection attack. If such documentation was accessible over a network, and a remote attacker could trick a user into visiting a specially crafted URL, it would lead to arbitrary web content being displayed next to the documentation. This could be used to perform a phishing attack by providing frame content that spoofed a login form on the site hosting the vulnerable documentation. (CVE-2013-1571)

It was discovered that the 2D component created shared memory segments with insecure permissions. A local attacker could use this flaw to read or write to the shared memory segment. (CVE-2013-1500)

Red Hat would like to thank Tim Brown for reporting CVE-2013-1500, and US-CERT for reporting CVE-2013-1571. US-CERT acknowledges Oracle as the original reporter of CVE-2013-1571.

Note: If the web browser plug-in provided by the icedtea-web package was installed, the issues exposed via Java applets could have been exploited without user interaction if a user visited a malicious website.

After installing this update, users of icedtea-web must install RHBA-2013:0959 for icedtea-web to continue functioning.

This erratum also upgrades the OpenJDK package to IcedTea7 2.3.10.
Refer to the NEWS file, linked to in the References, for further information.

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0957 advisory.

    [1.7.0.25-2.3.10.3.0.1.el6_4]
    - Update DISTRO_NAME in specfile

    [1.7.0.25-2.3.10.3.el6]
    - removed upstreamed patch1000 MBeanFix.patch
    - updated to newer IcedTea7-forest 2.3.10 with 8010118 fix
    - Resolves: rhbz#973119

    [1.7.0.25-2.3.10.2.el6]
    - added patch1000 MBeanFix.patch to fix regressions caused by security patches
    - Resolves: rhbz#973119

    [1.7.0.25-2.3.10.1.el6]
    - build bumped to 25
    - Resolves: rhbz#973119

    [1.7.0.19-2.3.10.0.el6]
    - Updated to latest IcedTea7-forest 2.3.10
    - patch 107 renamed to 500 for cosmetic purposes
    - improved handling of patch111 - nss-config-2.patch
    - removed patch 117, java-1.7.0-openjdk-nss-multiplePKCS11libraryInitialisationNnonCritical.patch       duplicated with patch 108 (java-1.7.0-openjdk-nss-icedtea-e9c857dcb964)
    - Added client/server directories so they can be owned
    - Added fix for RH857717, owned /etc/.java/ and /etc/.java/.systemPrefs
    - Resolves: rhbz#973119

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

IBM Java 1.5.0 has been updated to SR16-FP3 to fix bugs and security issues.

Please see also http://www.ibm.com/developerworks/java/jdk/alerts/

Also the following bug has been fixed :

  - add Europe/Busingen to tzmappings. (bnc#817062)

  - mark files in jre/bin and bin/ as executable     (bnc#823034)

The remote host has a version of IBM Domino (formerly Lotus Domino) 9.x prior to 9.0.1 installed. It is, therefore, reportedly affected by the following vulnerabilities :

  - The included version of the IBM Java SDK contains a     version of IBM JRE that contains numerous security     issues. (CVE-2013-0809, CVE-2013-1493, CVE-2013-2436,     CVE-2013-2455, CVE-2013-3006, CVE-2013-3007,     CVE-2013-3008, CVE-2013-3009, CVE-2013-3010,     CVE-2013-3011, CVE-2013-3012)

  - An input validation error exists related to handling     content in email messages that could allow cross-site     scripting attacks. (CVE-2013-4063)

  - An input validation error exists related to iNotes when     running in 'ultra-light' mode that could allow cross-     site scripting attacks. (CVE-2013-4064)

  - An input validation error exists related to handling     content in email messages and iNotes when running in     'ultra-light' mode that could allow cross-site     scripting attacks. (CVE-2013-4065)

  - Note that fixes in the Oracle Java CPUs for February,     April and June 2013 are included in the fixed IBM Java     release, which is included in the fixed IBM Domino     release. (CVE-2012-1541, CVE-2012-3213, CVE-2012-3342,     CVE-2013-0351, CVE-2013-0401, CVE-2013-0402,     CVE-2013-0409, CVE-2013-0419, CVE-2013-0423,     CVE-2013-0424, CVE-2013-0425, CVE-2013-0426,     CVE-2013-0427, CVE-2013-0428, CVE-2013-0429,     CVE-2013-0430, CVE-2013-0431, CVE-2013-0432,     CVE-2013-0433, CVE-2013-0434, CVE-2013-0435,     CVE-2013-0437, CVE-2013-0438, CVE-2013-0440,     CVE-2013-0441, CVE-2013-0442, CVE-2013-0443,     CVE-2013-0444, CVE-2013-0445, CVE-2013-0446,     CVE-2013-0448, CVE-2013-0449, CVE-2013-0450,     CVE-2013-1473, CVE-2013-1475, CVE-2013-1476,     CVE-2013-1478, CVE-2013-1479, CVE-2013-1480,     CVE-2013-1481, CVE-2013-1488, CVE-2013-1489,     CVE-2013-1491, CVE-2013-1500, CVE-2013-1518,     CVE-2013-1537, CVE-2013-1540, CVE-2013-1557,     CVE-2013-1558, CVE-2013-1561, CVE-2013-1563,     CVE-2013-1564, CVE-2013-1569, CVE-2013-1571,     CVE-2013-2383, CVE-2013-2384, CVE-2013-2394,     CVE-2013-2400, CVE-2013-2407, CVE-2013-2412,     CVE-2013-2414, CVE-2013-2415, CVE-2013-2416,     CVE-2013-2417, CVE-2013-2418, CVE-2013-2419,     CVE-2013-2420, CVE-2013-2421, CVE-2013-2422,     CVE-2013-2423, CVE-2013-2424, CVE-2013-2425,     CVE-2013-2426, CVE-2013-2427, CVE-2013-2428,     CVE-2013-2429, CVE-2013-2430, CVE-2013-2431,     CVE-2013-2432, CVE-2013-2433, CVE-2013-2434,     CVE-2013-2435, CVE-2013-2437, CVE-2013-2438,     CVE-2013-2439, CVE-2013-2440, CVE-2013-2442,     CVE-2013-2443, CVE-2013-2444, CVE-2013-2445,     CVE-2013-2446, CVE-2013-2447, CVE-2013-2448,     CVE-2013-2449, CVE-2013-2450, CVE-2013-2451,     CVE-2013-2452, CVE-2013-2453, CVE-2013-2454,     CVE-2013-2456, CVE-2013-2457, CVE-2013-2458,     CVE-2013-2459, CVE-2013-2460, CVE-2013-2461,     CVE-2013-2462, CVE-2013-2463, CVE-2013-2464,     CVE-2013-2465, CVE-2013-2466, CVE-2013-2467,     CVE-2013-2468, CVE-2013-2469, CVE-2013-2470,     CVE-2013-2471, CVE-2013-2472, CVE-2013-2473,     CVE-2013-3743, CVE-2013-3744, CVE-2013-4002)

java-1_7_0-openjdk was updated to icedtea-2.4.1 (bnc#828665) 

  - Security fixes

  - S6741606, CVE-2013-2407: Integrate Apache Santuario

  - S7158805, CVE-2013-2445: Better rewriting of nested     subroutine calls

  - S7170730, CVE-2013-2451: Improve Windows network stack     support.

  - S8000638, CVE-2013-2450: Improve deserialization

  - S8000642, CVE-2013-2446: Better handling of objects for     transportation

  - S8001032: Restrict object access

  - S8001033, CVE-2013-2452: Refactor network address     handling in virtual machine identifiers

  - S8001034, CVE-2013-1500: Memory management improvements

  - S8001038, CVE-2013-2444: Resourcefully handle resources

  - S8001043: Clarify definition restrictions

  - S8001308: Update display of applet windows

  - S8001309: Better handling of annotation interfaces

  - S8001318, CVE-2013-2447: Socket.getLocalAddress not     consistent with InetAddress.getLocalHost

  - S8001330, CVE-2013-2443: Improve on checking order     (non-Zero builds only)

  - S8003703, CVE-2013-2412: Update RMI connection dialog     box

  - S8004288, CVE-2013-2449: (fs) Files.probeContentType     problems

  - S8004584: Augment applet contextualization

  - S8005007: Better glyph processing

  - S8006328, CVE-2013-2448: Improve robustness of sound     classes

  - S8006611: Improve scripting

  - S8007467: Improve robustness of JMX internal APIs

  - S8007471: Improve MBean notifications

  - S8007812, CVE-2013-2455: (reflect)     Class.getEnclosingMethod problematic for some classes

  - S8007925: Improve cmsStageAllocLabV2ToV4curves

  - S8007926: Improve cmsPipelineDup

  - S8007927: Improve cmsAllocProfileSequenceDescription

  - S8007929: Improve CurvesAlloc

  - S8008120, CVE-2013-2457: Improve JMX class checking

  - S8008124, CVE-2013-2453: Better compliance testing

  - S8008128: Better API coherence for JMX

  - S8008132, CVE-2013-2456: Better serialization support

  - S8008585: Better JMX data handling

  - S8008593: Better URLClassLoader resource management

  - S8008603: Improve provision of JMX providers

  - S8008607: Better input checking in JMX

  - S8008611: Better handling of annotations in JMX

  - S8008615: Improve robustness of JMX internal APIs

  - S8008623: Better handling of MBeanServers

  - S8008744, CVE-2013-2407: Rework part of fix for     JDK-6741606

  - S8008982: Adjust JMX for underlying interface changes

  - S8009004: Better implementation of RMI connections

  - S8009008: Better manage management-api

  - S8009013: Better handling of T2K glyphs

  - S8009034: Improve resulting notifications in JMX

  - S8009038: Improve JMX notification support

  - S8009057, CVE-2013-2448: Improve MIDI event handling

  - S8009067: Improve storing keys in KeyStore

  - S8009071, CVE-2013-2459: Improve shape handling

  - S8009235: Improve handling of TSA data

  - S8009424, CVE-2013-2458: Adapt Nashorn to JSR-292     implementation change

  - S8009554, CVE-2013-2454: Improve     SerialJavaObject.getFields

  - S8009654: Improve stability of cmsnamed

  - S8010209, CVE-2013-2460: Better provision of factories

  - S8011243, CVE-2013-2470: Improve ImagingLib

  - S8011248, CVE-2013-2471: Better Component Rasters

  - S8011253, CVE-2013-2472: Better Short Component Rasters

  - S8011257, CVE-2013-2473: Better Byte Component Rasters

  - S8012375, CVE-2013-1571: Improve Javadoc framing

  - S8012421: Better positioning of PairPositioning

  - S8012438, CVE-2013-2463: Better image validation

  - S8012597, CVE-2013-2465: Better image channel     verification

  - S8012601, CVE-2013-2469: Better validation of image     layouts

  - S8014281, CVE-2013-2461: Better checking of XML     signature

  - S8015997: Additional improvement in Javadoc framing

  - OpenJDK

  - list to long, please consult NEWS file

  - java-1.7.0-openjdk-zero-arch.patch: fix detection of     zero arch

  - ignore rhino dependencies during a build to prevent a     build cycle 

  - update to icedtea-2.4.0 (based on oracle jdk7u40)

  - OpenJDK (see NEWS for full listing)

  - PR1209, S7170638: Use DTRACE_PROBE[N] in JNI Set and     SetStatic Field.

  - PR1206, S7201205: Add Makefile configuration option to     build with unlimited crypto in OpenJDK

  - Backports

  - PR1197, S8003120, RH868136:
    ResourceManager.getApplicationResources() does not close     InputStreams

  - S8014618, RH962568: Need to strip leading zeros in     TlsPremasterSecret of DHKeyAgreement

  - Bug fixes

  - PR1212: IcedTea7 fails to build because     Resources.getText() is no longer available for code to     use

  - Add NSS (commented out) to other platforms.

  - Allow multiple PKCS11 library initialisation to be a     non-critical error.

  - Complete switch from local zlib patch to upstream     version.

  - Include defs.make in buildtree.make so ZERO_BUILD is     recognised and JVM_VARIANT_ZERO set.

  - Provide support for using PKCS11 provider with NSS

  - Remove file apparently removed as part of upstreaming of     Zero.

  - Revert 7060849

  - Set UNLIMITED_CRYPTO=true to ensure we use the unlimited     policy.

  - PR473: Set handleStartupErrors to     ignoreMultipleInitialisation in nss.cfg

  - PR716: IcedTea7 should bootstrap with IcedTea6

  - Expand java.security.cert.* imports to avoid conflict     when building with OpenJDK 6.

  - Fix indentation on Makefile block not executed when     STRIP_POLICY=no_strip is set

  - Fix invalid XSL stylesheets and DTD introduced as part     of JEP 167.

  - Include defs.make in buildtree.make so ZERO_BUILD is     recognised and JVM_VARIANT_ZERO set.

  - Make sure libffi cflags and libs are used.

  - PR1378: Add AArch64 support to Zero

  - PR1170: Ensure unlimited crypto policy is in place.

  - RH513605, PR1280: Updating/Installing OpenJDK should     recreate the shared class-data archive

  - PR1358: Make XRender mandatory

  - PR1360: Check for /usr/lib64 JVMs and generic JPackage     alternative

  - PR1435, D657854: OpenJDK 7 returns incorrect TrueType     font metrics

  - PR728: GTKLookAndFeel does not honor     gtk-alternative-button-order

  - JamVM

  - JSR 335: (lambda expressions) initial hack

  - JEP 171: Implement fence methods in sun.misc.Unsafe

  - Fix invokesuper check in invokespecial opcode

  - Fix non-direct interpreter invokespecial super-class     check

  - When GC'ing a native method don't try to free code

  - Do not free unprepared Miranda method code data

  - Set anonymous class protection domain

  - JVM_IsVMGeneratedMethodIx stub

  - Dummy implementation of sun.misc.Perf natives

  - separate vm for zero is no longer needed

  - drop java-1.7.0-openjdk-aarch64.patch (upstream: PR1378)

  - fix bnc#781690c#11 - setup JAVA_HOME in posttrans, so     certificates will be created by this JVM

  - fix the postrans conditions (add missing prefiX)

  - relax build requires, so every java-devel >= 1.7.0 can     match

ID	Name	Product	Family	Published	Updated	Severity
72139	GLSA-201401-30 : Oracle JRE/JDK: Multiple vulnerabilities (ROBOT)	Nessus	Gentoo Local Security Checks	1/27/2014	5/22/2026	critical
66932	Oracle Java SE Multiple Vulnerabilities (June 2013 CPU)	Nessus	Windows	6/19/2013	12/19/2024	critical
66946	CentOS 6 : java-1.7.0-openjdk (CESA-2013:0957)	Nessus	CentOS Local Security Checks	6/21/2013	3/29/2022	critical
68836	Oracle Linux 6 : java-1.7.0-openjdk (ELSA-2013-0957)	Nessus	Oracle Linux Local Security Checks	7/12/2013	10/22/2024	low
69093	SuSE 10 Security Update : java-1_5_0-ibm (ZYPP Patch Number 8653)	Nessus	SuSE Local Security Checks	7/28/2013	3/29/2022	critical
71861	IBM Domino 9.x < 9.0.1 Multiple Vulnerabilities (credentialed check)	Nessus	Windows	1/8/2014	5/25/2022	critical
75101	openSUSE Security Update : java-1_7_0-openjdk (openSUSE-SU-2013:1288-1)	Nessus	SuSE Local Security Checks	6/13/2014	3/29/2022	critical

Detections

Analytics

Plugins Search

critical

critical

critical

low

critical

critical

critical