CVE

Id
65857  
CVE No.
CVE-2013-5910  
Status
Candidate  
Description
Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, Java SE Embedded 7u45, and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Security. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that CanonicalizerBase.java in the XML canonicalizer allows untrusted code to access mutable byte arrays.  
Phase
Assigned (20130918)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
643026 65857 CVE-2013-5910 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html  View
643027 65857 CVE-2013-5910 CONFIRM:http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/07004bb53c3c  View
643028 65857 CVE-2013-5910 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1052942  View
643029 65857 CVE-2013-5910 CONFIRM:https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777  View
643030 65857 CVE-2013-5910 HP:HPSBUX02972  View
643031 65857 CVE-2013-5910 URL:http://marc.info/?l=bugtraq&m=139402697611681&w=2  View
643032 65857 CVE-2013-5910 HP:HPSBUX02973  View
643033 65857 CVE-2013-5910 URL:http://marc.info/?l=bugtraq&m=139402749111889&w=2  View
643034 65857 CVE-2013-5910 HP:SSRT101454  View
643035 65857 CVE-2013-5910 URL:http://marc.info/?l=bugtraq&m=139402697611681&w=2  View
643036 65857 CVE-2013-5910 HP:SSRT101455  View
643037 65857 CVE-2013-5910 URL:http://marc.info/?l=bugtraq&m=139402749111889&w=2  View
643038 65857 CVE-2013-5910 REDHAT:RHSA-2014:0026  View
643039 65857 CVE-2013-5910 URL:http://rhn.redhat.com/errata/RHSA-2014-0026.html  View
643040 65857 CVE-2013-5910 REDHAT:RHSA-2014:0027  View
643041 65857 CVE-2013-5910 URL:http://rhn.redhat.com/errata/RHSA-2014-0027.html  View
643042 65857 CVE-2013-5910 REDHAT:RHSA-2014:0097  View
643043 65857 CVE-2013-5910 URL:http://rhn.redhat.com/errata/RHSA-2014-0097.html  View
643044 65857 CVE-2013-5910 REDHAT:RHSA-2014:0030  View
643045 65857 CVE-2013-5910 URL:http://rhn.redhat.com/errata/RHSA-2014-0030.html  View
643046 65857 CVE-2013-5910 REDHAT:RHSA-2014:0134  View
643047 65857 CVE-2013-5910 URL:http://rhn.redhat.com/errata/RHSA-2014-0134.html  View
643048 65857 CVE-2013-5910 REDHAT:RHSA-2014:0135  View
643049 65857 CVE-2013-5910 URL:http://rhn.redhat.com/errata/RHSA-2014-0135.html  View
643050 65857 CVE-2013-5910 SUSE:openSUSE-SU-2014:0174  View
643051 65857 CVE-2013-5910 URL:http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html  View
643052 65857 CVE-2013-5910 SUSE:SUSE-SU-2014:0246  View
643053 65857 CVE-2013-5910 URL:http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html  View
643054 65857 CVE-2013-5910 SUSE:SUSE-SU-2014:0266  View
643055 65857 CVE-2013-5910 URL:http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html  View
643056 65857 CVE-2013-5910 SUSE:openSUSE-SU-2014:0177  View
643057 65857 CVE-2013-5910 URL:http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html  View
643058 65857 CVE-2013-5910 SUSE:openSUSE-SU-2014:0180  View
643059 65857 CVE-2013-5910 URL:http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html  View
643060 65857 CVE-2013-5910 SUSE:SUSE-SU-2014:0451  View
643061 65857 CVE-2013-5910 URL:http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html  View
643062 65857 CVE-2013-5910 UBUNTU:USN-2089-1  View
643063 65857 CVE-2013-5910 URL:http://www.ubuntu.com/usn/USN-2089-1  View
643064 65857 CVE-2013-5910 UBUNTU:USN-2124-1  View
643065 65857 CVE-2013-5910 URL:http://www.ubuntu.com/usn/USN-2124-1  View
643066 65857 CVE-2013-5910 BID:64758  View
643067 65857 CVE-2013-5910 URL:http://www.securityfocus.com/bid/64758  View
643068 65857 CVE-2013-5910 BID:64933  View
643069 65857 CVE-2013-5910 URL:http://www.securityfocus.com/bid/64933  View
643070 65857 CVE-2013-5910 OSVDB:102021  View
643071 65857 CVE-2013-5910 URL:http://osvdb.org/102021  View
643072 65857 CVE-2013-5910 SECTRACK:1029608  View
643073 65857 CVE-2013-5910 URL:http://www.securitytracker.com/id/1029608  View
643074 65857 CVE-2013-5910 SECUNIA:56432  View
643075 65857 CVE-2013-5910 URL:http://secunia.com/advisories/56432  View
643076 65857 CVE-2013-5910 SECUNIA:56485  View
643077 65857 CVE-2013-5910 URL:http://secunia.com/advisories/56485  View
643078 65857 CVE-2013-5910 SECUNIA:56486  View
643079 65857 CVE-2013-5910 URL:http://secunia.com/advisories/56486  View
643080 65857 CVE-2013-5910 SECUNIA:56535  View
643081 65857 CVE-2013-5910 URL:http://secunia.com/advisories/56535  View
643082 65857 CVE-2013-5910 XF:oracle-cpujan2014-cve20135910(90352)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
22955 JVNDB-2013-004530 PolarSSL の RSA-CRT の実装におけるタイミングサイドチャネル攻撃を実行される脆弱性 PolarSSL の RSA-CRT の実装は、モンゴメリ乗算を適切に実行しないため、タイミングサイドチャネル攻撃を実行される、および RSA 秘密鍵を取得される脆弱性が存在します。 CVE-2013-5915 65857 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004530.html  View