NVD

Id
29306  
Name
CVE-2014-0411  
Description
Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that this issue allows remote attackers to obtain sensitive information about encryption keys via a timing discrepancy during the TLS/SSL handshake.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-01-15  
Modified Date
2017-01-06  
Seq
2014-0411  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
155286 29306 CVE-2014-0411 http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/d533e96c7acc  View
155287 29306 CVE-2014-0411 SUSE-SU-2014:0246  View
155288 29306 CVE-2014-0411 SUSE-SU-2014:0266  View
155289 29306 CVE-2014-0411 SUSE-SU-2014:0451  View
155290 29306 CVE-2014-0411 openSUSE-SU-2014:0174  View
155291 29306 CVE-2014-0411 openSUSE-SU-2014:0177  View
155292 29306 CVE-2014-0411 openSUSE-SU-2014:0180  View
155293 29306 CVE-2014-0411 SSRT101454  View
155294 29306 CVE-2014-0411 HPSBUX02973  View
155295 29306 CVE-2014-0411 RHSA-2014:0026  View
155296 29306 CVE-2014-0411 RHSA-2014:0027  View
155297 29306 CVE-2014-0411 RHSA-2014:0030  View
155298 29306 CVE-2014-0411 RHSA-2014:0097  View
155299 29306 CVE-2014-0411 RHSA-2014:0134  View
155300 29306 CVE-2014-0411 RHSA-2014:0135  View
155301 29306 CVE-2014-0411 RHSA-2014:0136  View
155302 29306 CVE-2014-0411 59194  View
155303 29306 CVE-2014-0411 59235  View
155304 29306 CVE-2014-0411 59283  View
155305 29306 CVE-2014-0411 59324  View
155306 29306 CVE-2014-0411 59339  View
155307 29306 CVE-2014-0411 59705  View
155308 29306 CVE-2014-0411 60833  View
155309 29306 CVE-2014-0411 60835  View
155310 29306 CVE-2014-0411 60836  View
155311 29306 CVE-2014-0411 http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004656  View
155312 29306 CVE-2014-0411 http://www-01.ibm.com/support/docview.wss?uid=swg21669519  View
155313 29306 CVE-2014-0411 http://www-01.ibm.com/support/docview.wss?uid=swg21675938  View
155314 29306 CVE-2014-0411 http://www-01.ibm.com/support/docview.wss?uid=swg21676190  View
155315 29306 CVE-2014-0411 http://www-01.ibm.com/support/docview.wss?uid=swg21676373  View
155316 29306 CVE-2014-0411 http://www-01.ibm.com/support/docview.wss?uid=swg21676978  View
155317 29306 CVE-2014-0411 http://www-01.ibm.com/support/docview.wss?uid=swg21677388  View
155318 29306 CVE-2014-0411 http://www-01.ibm.com/support/docview.wss?uid=swg21680234  View
155319 29306 CVE-2014-0411 http://www-01.ibm.com/support/docview.wss?uid=swg21680387  View
155320 29306 CVE-2014-0411 http://www-01.ibm.com/support/docview.wss?uid=swg21682668  View
155321 29306 CVE-2014-0411 http://www-01.ibm.com/support/docview.wss?uid=swg21682669  View
155322 29306 CVE-2014-0411 http://www-01.ibm.com/support/docview.wss?uid=swg21682670  View
155323 29306 CVE-2014-0411 http://www-01.ibm.com/support/docview.wss?uid=swg21682671  View
155324 29306 CVE-2014-0411 http://www-01.ibm.com/support/docview.wss?uid=swg21682904  View
155325 29306 CVE-2014-0411 http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096132  View
155326 29306 CVE-2014-0411 http://www.ibm.com/support/docview.wss?uid=ssg1S1004745  View
155327 29306 CVE-2014-0411 http://www.ibm.com/support/docview.wss?uid=swg21672078  View
155328 29306 CVE-2014-0411 http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html  View
155329 29306 CVE-2014-0411 64758  View
155330 29306 CVE-2014-0411 64918  View
155331 29306 CVE-2014-0411 1029608  View
155332 29306 CVE-2014-0411 USN-2089-1  View
155333 29306 CVE-2014-0411 USN-2124-1  View
155334 29306 CVE-2014-0411 oracle-cpujan2014-cve20140411(90357)  View
155335 29306 CVE-2014-0411 https://bugzilla.redhat.com/show_bug.cgi?id=1053010  View
155336 29306 CVE-2014-0411 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777  View
155337 29306 CVE-2014-0411 https://www.ibm.com/support/docview.wss?uid=swg21675223  View
155338 29306 CVE-2014-0411 https://www.ibm.com/support/docview.wss?uid=swg21677913  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12285 JVNDB-2014-001160 複数の Oracle Java 製品における JSSE に関する脆弱性 Oracle Java SE、JRockit および Java SE Embedded には、JSSE に関する処理に不備があるため、機密性、および完全性に影響のある脆弱性が存在します。 CVE-2014-0411 67812 CVE-2014-0411 29306 4 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001160.html 2014-01-14 2015-03-17 View