NVD

Id
38489  
Name
CVE-2013-2426  
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect invocation of the defaultReadObject method in the ConcurrentHashMap class, which allows remote attackers to bypass the Java sandbox.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-04-17  
Modified Date
2014-10-04  
Seq
2013-2426  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
196740 38489 CVE-2013-2426 http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/  View
196741 38489 CVE-2013-2426 http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/  View
196742 38489 CVE-2013-2426 http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/98ad2f1e25d1  View
196743 38489 CVE-2013-2426 SUSE-SU-2013:0814  View
196744 38489 CVE-2013-2426 openSUSE-SU-2013:0777  View
196745 38489 CVE-2013-2426 openSUSE-SU-2013:0964  View
196746 38489 CVE-2013-2426 [distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!  View
196747 38489 CVE-2013-2426 oval:org.mitre.oval:def:16683  View
196748 38489 CVE-2013-2426 RHSA-2013:0752  View
196749 38489 CVE-2013-2426 RHSA-2013:0757  View
196750 38489 CVE-2013-2426 GLSA-201406-32  View
196751 38489 CVE-2013-2426 MDVSA-2013:145  View
196752 38489 CVE-2013-2426 MDVSA-2013:161  View
196753 38489 CVE-2013-2426 http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html  View
196754 38489 CVE-2013-2426 USN-1806-1  View
196755 38489 CVE-2013-2426 TA13-107A  View
196756 38489 CVE-2013-2426 https://bugzilla.redhat.com/show_bug.cgi?id=952653  View
196757 38489 CVE-2013-2426 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124  View
196758 38489 CVE-2013-2426 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20800 JVNDB-2013-002375 Oracle Java SE の Java Runtime Environment における Libraries の処理に関する脆弱性 Oracle Java SE の Java Runtime Environment (JRE) および OpenJDK には、Libraries に関する処理に不備があるため、機密性、完全性、可用性に影響のある脆弱性が存在します。 CVE-2013-2426 62368 CVE-2013-2426 38489 9.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002375.html 2013-04-16 2014-03-31 View