USN-2187-1
- Source
- https://ubuntu.com/security/notices/USN-2187-1
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-2187-1.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/USN-2187-1
- Upstream
- Related
- Published
- 2014-04-30T14:32:48.262207Z
- Modified
- 2025-10-13T04:34:02Z
- Summary
- openjdk-7 vulnerabilities
- Details
-
Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity and availability. An attacker could exploit these to cause a denial of service or expose sensitive data over the network. (CVE-2014-0429, CVE-2014-0446, CVE-2014-0451, CVE-2014-0452, CVE-2014-0454, CVE-2014-0455, CVE-2014-0456, CVE-2014-0457, CVE-2014-0458, CVE-2014-0461, CVE-2014-2397, CVE-2014-2402, CVE-2014-2412, CVE-2014-2414, CVE-2014-2421, CVE-2014-2423, CVE-2014-2427)
Two vulnerabilities were discovered in the OpenJDK JRE related to information disclosure and data integrity. An attacker could exploit these to expose sensitive data over the network. (CVE-2014-0453, CVE-2014-0460)
A vulnerability was discovered in the OpenJDK JRE related to availability. An attacker could exploit this to cause a denial of service. (CVE-2014-0459)
Jakub Wilk discovered that the OpenJDK JRE incorrectly handled temporary files. A local attacker could possibly use this issue to overwrite arbitrary files. In the default installation of Ubuntu, this should be prevented by the Yama link restrictions. (CVE-2014-1876)
Two vulnerabilities were discovered in the OpenJDK JRE related to data integrity. (CVE-2014-2398, CVE-2014-2413)
A vulnerability was discovered in the OpenJDK JRE related to information disclosure. An attacker could exploit this to expose sensitive data over the network. (CVE-2014-2403)
- References
-
- https://ubuntu.com/security/notices/USN-2187-1
- https://ubuntu.com/security/CVE-2014-0429
- https://ubuntu.com/security/CVE-2014-0446
- https://ubuntu.com/security/CVE-2014-0451
- https://ubuntu.com/security/CVE-2014-0452
- https://ubuntu.com/security/CVE-2014-0453
- https://ubuntu.com/security/CVE-2014-0454
- https://ubuntu.com/security/CVE-2014-0455
- https://ubuntu.com/security/CVE-2014-0456
- https://ubuntu.com/security/CVE-2014-0457
- https://ubuntu.com/security/CVE-2014-0458
- https://ubuntu.com/security/CVE-2014-0459
- https://ubuntu.com/security/CVE-2014-0460
- https://ubuntu.com/security/CVE-2014-0461
- https://ubuntu.com/security/CVE-2014-1876
- https://ubuntu.com/security/CVE-2014-2397
- https://ubuntu.com/security/CVE-2014-2398
- https://ubuntu.com/security/CVE-2014-2402
- https://ubuntu.com/security/CVE-2014-2403
- https://ubuntu.com/security/CVE-2014-2412
- https://ubuntu.com/security/CVE-2014-2413
- https://ubuntu.com/security/CVE-2014-2414
- https://ubuntu.com/security/CVE-2014-2421
- https://ubuntu.com/security/CVE-2014-2423
- https://ubuntu.com/security/CVE-2014-2427
- https://launchpad.net/bugs/1283828
Affected packages
Ubuntu:14.04:LTS / openjdk-7
Package
- Name
- openjdk-7
- Purl
- pkg:deb/ubuntu/openjdk-7@7u55-2.4.7-1ubuntu1?arch=source&distro=trusty
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed7u55-2.4.7-1ubuntu1
Affected versions
7u25-2.*
7u45-2.*
7u51-2.*
Ecosystem specific
{
"binaries": [
{
"binary_version": "7u55-2.4.7-1ubuntu1",
"binary_name": "icedtea-7-jre-jamvm"
},
{
"binary_version": "7u55-2.4.7-1ubuntu1",
"binary_name": "openjdk-7-demo"
},
{
"binary_version": "7u55-2.4.7-1ubuntu1",
"binary_name": "openjdk-7-jdk"
},
{
"binary_version": "7u55-2.4.7-1ubuntu1",
"binary_name": "openjdk-7-jre"
},
{
"binary_version": "7u55-2.4.7-1ubuntu1",
"binary_name": "openjdk-7-jre-headless"
},
{
"binary_version": "7u55-2.4.7-1ubuntu1",
"binary_name": "openjdk-7-jre-lib"
},
{
"binary_version": "7u55-2.4.7-1ubuntu1",
"binary_name": "openjdk-7-jre-zero"
},
{
"binary_version": "7u55-2.4.7-1ubuntu1",
"binary_name": "openjdk-7-source"
}
],
"availability": "No subscription required"
}
Database specific
source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-2187-1.json"
cves_map
{
"cves": [
{
"id": "CVE-2014-0429",
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2014-0446",
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2014-0451",
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2014-0452",
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2014-0453",
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2014-0454",
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2014-0455",
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2014-0456",
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2014-0457",
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2014-0458",
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2014-0459",
"severity": [
{
"type": "Ubuntu",
"score": "low"
}
]
},
{
"id": "CVE-2014-0460",
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2014-0461",
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2014-1876",
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2014-2397",
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2014-2398",
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2014-2402",
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2014-2403",
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2014-2412",
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2014-2413",
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2014-2414",
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2014-2421",
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2014-2423",
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2014-2427",
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
]
}
],
"ecosystem": "Ubuntu:14.04:LTS"
}