USN-2187-1
- Source
- https://ubuntu.com/security/notices/USN-2187-1
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-2187-1.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/USN-2187-1
- Upstream
- Related
- Published
- 2014-04-30T14:32:48.262207Z
- Modified
- 2025-10-13T04:34:02Z
- Summary
- openjdk-7 vulnerabilities
- Details
-
Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity and availability. An attacker could exploit these to cause a denial of service or expose sensitive data over the network. (CVE-2014-0429, CVE-2014-0446, CVE-2014-0451, CVE-2014-0452, CVE-2014-0454, CVE-2014-0455, CVE-2014-0456, CVE-2014-0457, CVE-2014-0458, CVE-2014-0461, CVE-2014-2397, CVE-2014-2402, CVE-2014-2412, CVE-2014-2414, CVE-2014-2421, CVE-2014-2423, CVE-2014-2427)
Two vulnerabilities were discovered in the OpenJDK JRE related to information disclosure and data integrity. An attacker could exploit these to expose sensitive data over the network. (CVE-2014-0453, CVE-2014-0460)
A vulnerability was discovered in the OpenJDK JRE related to availability. An attacker could exploit this to cause a denial of service. (CVE-2014-0459)
Jakub Wilk discovered that the OpenJDK JRE incorrectly handled temporary files. A local attacker could possibly use this issue to overwrite arbitrary files. In the default installation of Ubuntu, this should be prevented by the Yama link restrictions. (CVE-2014-1876)
Two vulnerabilities were discovered in the OpenJDK JRE related to data integrity. (CVE-2014-2398, CVE-2014-2413)
A vulnerability was discovered in the OpenJDK JRE related to information disclosure. An attacker could exploit this to expose sensitive data over the network. (CVE-2014-2403)
- References
-
- https://ubuntu.com/security/notices/USN-2187-1
- https://ubuntu.com/security/CVE-2014-0429
- https://ubuntu.com/security/CVE-2014-0446
- https://ubuntu.com/security/CVE-2014-0451
- https://ubuntu.com/security/CVE-2014-0452
- https://ubuntu.com/security/CVE-2014-0453
- https://ubuntu.com/security/CVE-2014-0454
- https://ubuntu.com/security/CVE-2014-0455
- https://ubuntu.com/security/CVE-2014-0456
- https://ubuntu.com/security/CVE-2014-0457
- https://ubuntu.com/security/CVE-2014-0458
- https://ubuntu.com/security/CVE-2014-0459
- https://ubuntu.com/security/CVE-2014-0460
- https://ubuntu.com/security/CVE-2014-0461
- https://ubuntu.com/security/CVE-2014-1876
- https://ubuntu.com/security/CVE-2014-2397
- https://ubuntu.com/security/CVE-2014-2398
- https://ubuntu.com/security/CVE-2014-2402
- https://ubuntu.com/security/CVE-2014-2403
- https://ubuntu.com/security/CVE-2014-2412
- https://ubuntu.com/security/CVE-2014-2413
- https://ubuntu.com/security/CVE-2014-2414
- https://ubuntu.com/security/CVE-2014-2421
- https://ubuntu.com/security/CVE-2014-2423
- https://ubuntu.com/security/CVE-2014-2427
- https://launchpad.net/bugs/1283828
Affected packages
Ubuntu:14.04:LTS / openjdk-7
Package
- Name
- openjdk-7
- Purl
- pkg:deb/ubuntu/openjdk-7@7u55-2.4.7-1ubuntu1?arch=source&distro=trusty
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed7u55-2.4.7-1ubuntu1
Affected versions
7u25-2.*
7u45-2.*
7u51-2.*
Ecosystem specific
{
"binaries": [
{
"binary_name": "icedtea-7-jre-jamvm",
"binary_version": "7u55-2.4.7-1ubuntu1"
},
{
"binary_name": "openjdk-7-demo",
"binary_version": "7u55-2.4.7-1ubuntu1"
},
{
"binary_name": "openjdk-7-jdk",
"binary_version": "7u55-2.4.7-1ubuntu1"
},
{
"binary_name": "openjdk-7-jre",
"binary_version": "7u55-2.4.7-1ubuntu1"
},
{
"binary_name": "openjdk-7-jre-headless",
"binary_version": "7u55-2.4.7-1ubuntu1"
},
{
"binary_name": "openjdk-7-jre-lib",
"binary_version": "7u55-2.4.7-1ubuntu1"
},
{
"binary_name": "openjdk-7-jre-zero",
"binary_version": "7u55-2.4.7-1ubuntu1"
},
{
"binary_name": "openjdk-7-source",
"binary_version": "7u55-2.4.7-1ubuntu1"
}
],
"availability": "No subscription required"
}
Database specific
cves_map
{
"ecosystem": "Ubuntu:14.04:LTS",
"cves": [
{
"severity": [
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2014-0429"
},
{
"severity": [
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2014-0446"
},
{
"severity": [
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2014-0451"
},
{
"severity": [
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2014-0452"
},
{
"severity": [
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2014-0453"
},
{
"severity": [
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2014-0454"
},
{
"severity": [
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2014-0455"
},
{
"severity": [
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2014-0456"
},
{
"severity": [
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2014-0457"
},
{
"severity": [
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2014-0458"
},
{
"severity": [
{
"score": "low",
"type": "Ubuntu"
}
],
"id": "CVE-2014-0459"
},
{
"severity": [
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2014-0460"
},
{
"severity": [
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2014-0461"
},
{
"severity": [
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2014-1876"
},
{
"severity": [
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2014-2397"
},
{
"severity": [
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2014-2398"
},
{
"severity": [
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2014-2402"
},
{
"severity": [
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2014-2403"
},
{
"severity": [
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2014-2412"
},
{
"severity": [
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2014-2413"
},
{
"severity": [
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2014-2414"
},
{
"severity": [
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2014-2421"
},
{
"severity": [
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2014-2423"
},
{
"severity": [
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2014-2427"
}
]
}