CVE-2013-2465
Critical · 9.8 CISA KEV · ransomwareCVSS
9.8
EPSS
98.8%
Published
Jun 18, 2013
CISA due date
Apr 18, 2022
The record
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image channel verification" in 2D.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:6.0 | openjdk-6 | 0 | 6b27-1.12.6-1~deb6u1 |
| Debian:7 | openjdk-6 | 0 | 6b27-1.12.6-1~deb7u1 |
| Debian:7 | openjdk-7 | 0 | 7u25-2.3.10-1~deb7u1 |
| Mageia:2 | icedtea-web | 0 | 1.3.2-1.1.mga2 |
| Mageia:2 | java-1.6.0-openjdk | 0 | 1.6.0.0-42.b24.1.mga2 |
| Mageia:2 | java-1.7.0-openjdk | 0 | 1.7.0.25-2.3.10.1.mga2 |
| Mageia:3 | icedtea-web | 0 | 1.3.2-1.1.mga3 |
| Mageia:3 | java-1.7.0-openjdk | 0 | 1.7.0.25-2.3.10.1.mga3 |
| Red Hat:enterprise_linux:5::server | java-1.6.0-openjdk | 0 | 1:1.6.0.0-1.41.1.11.11.90.el5_9 |
| Red Hat:enterprise_linux:5::server | java-1.6.0-openjdk-debuginfo | 0 | 1:1.6.0.0-1.41.1.11.11.90.el5_9 |
| Red Hat:enterprise_linux:5::server | java-1.6.0-openjdk-demo | 0 | 1:1.6.0.0-1.41.1.11.11.90.el5_9 |
| Red Hat:enterprise_linux:5::server | java-1.6.0-openjdk-devel | 0 | 1:1.6.0.0-1.41.1.11.11.90.el5_9 |
| Red Hat:enterprise_linux:5::server | java-1.6.0-openjdk-javadoc | 0 | 1:1.6.0.0-1.41.1.11.11.90.el5_9 |
| Red Hat:enterprise_linux:5::server | java-1.6.0-openjdk-src | 0 | 1:1.6.0.0-1.41.1.11.11.90.el5_9 |
| Red Hat:enterprise_linux:5::server | java-1.7.0-openjdk | 0 | 1:1.7.0.25-2.3.10.4.el5_9 |
| Red Hat:enterprise_linux:5::server | java-1.7.0-openjdk-debuginfo | 0 | 1:1.7.0.25-2.3.10.4.el5_9 |
| Red Hat:enterprise_linux:5::server | java-1.7.0-openjdk-demo | 0 | 1:1.7.0.25-2.3.10.4.el5_9 |
| Red Hat:enterprise_linux:5::server | java-1.7.0-openjdk-devel | 0 | 1:1.7.0.25-2.3.10.4.el5_9 |
| Red Hat:enterprise_linux:5::server | java-1.7.0-openjdk-javadoc | 0 | 1:1.7.0.25-2.3.10.4.el5_9 |
| Red Hat:enterprise_linux:5::server | java-1.7.0-openjdk-src | 0 | 1:1.7.0.25-2.3.10.4.el5_9 |
| Red Hat:enterprise_linux:6::client | java-1.6.0-openjdk | 0 | 1:1.6.0.0-1.62.1.11.11.90.el6_4 |
| Red Hat:enterprise_linux:6::client | java-1.6.0-openjdk-debuginfo | 0 | 1:1.6.0.0-1.62.1.11.11.90.el6_4 |
| Red Hat:enterprise_linux:6::client | java-1.6.0-openjdk-demo | 0 | 1:1.6.0.0-1.62.1.11.11.90.el6_4 |
| Red Hat:enterprise_linux:6::client | java-1.6.0-openjdk-devel | 0 | 1:1.6.0.0-1.62.1.11.11.90.el6_4 |
| Red Hat:enterprise_linux:6::client | java-1.6.0-openjdk-javadoc | 0 | 1:1.6.0.0-1.62.1.11.11.90.el6_4 |
| Red Hat:enterprise_linux:6::client | java-1.6.0-openjdk-src | 0 | 1:1.6.0.0-1.62.1.11.11.90.el6_4 |
| Red Hat:enterprise_linux:6::client | java-1.7.0-openjdk | 0 | 1:1.7.0.25-2.3.10.3.el6_4 |
| Red Hat:enterprise_linux:6::client | java-1.7.0-openjdk-debuginfo | 0 | 1:1.7.0.25-2.3.10.3.el6_4 |
| Red Hat:enterprise_linux:6::client | java-1.7.0-openjdk-demo | 0 | 1:1.7.0.25-2.3.10.3.el6_4 |
| Red Hat:enterprise_linux:6::client | java-1.7.0-openjdk-devel | 0 | 1:1.7.0.25-2.3.10.3.el6_4 |
| Red Hat:enterprise_linux:6::client | java-1.7.0-openjdk-javadoc | 0 | 1:1.7.0.25-2.3.10.3.el6_4 |
| Red Hat:enterprise_linux:6::client | java-1.7.0-openjdk-src | 0 | 1:1.7.0.25-2.3.10.3.el6_4 |
| Red Hat:enterprise_linux:6::computenode | java-1.6.0-openjdk | 0 | 1:1.6.0.0-1.62.1.11.11.90.el6_4 |
| Red Hat:enterprise_linux:6::computenode | java-1.6.0-openjdk-debuginfo | 0 | 1:1.6.0.0-1.62.1.11.11.90.el6_4 |
| Red Hat:enterprise_linux:6::computenode | java-1.6.0-openjdk-demo | 0 | 1:1.6.0.0-1.62.1.11.11.90.el6_4 |
| Red Hat:enterprise_linux:6::computenode | java-1.6.0-openjdk-devel | 0 | 1:1.6.0.0-1.62.1.11.11.90.el6_4 |
| Red Hat:enterprise_linux:6::computenode | java-1.6.0-openjdk-javadoc | 0 | 1:1.6.0.0-1.62.1.11.11.90.el6_4 |
| Red Hat:enterprise_linux:6::computenode | java-1.6.0-openjdk-src | 0 | 1:1.6.0.0-1.62.1.11.11.90.el6_4 |
| Red Hat:enterprise_linux:6::computenode | java-1.7.0-openjdk | 0 | 1:1.7.0.25-2.3.10.3.el6_4 |
| Red Hat:enterprise_linux:6::computenode | java-1.7.0-openjdk-debuginfo | 0 | 1:1.7.0.25-2.3.10.3.el6_4 |
| Red Hat:enterprise_linux:6::computenode | java-1.7.0-openjdk-demo | 0 | 1:1.7.0.25-2.3.10.3.el6_4 |
| Red Hat:enterprise_linux:6::computenode | java-1.7.0-openjdk-devel | 0 | 1:1.7.0.25-2.3.10.3.el6_4 |
| Red Hat:enterprise_linux:6::computenode | java-1.7.0-openjdk-javadoc | 0 | 1:1.7.0.25-2.3.10.3.el6_4 |
| Red Hat:enterprise_linux:6::computenode | java-1.7.0-openjdk-src | 0 | 1:1.7.0.25-2.3.10.3.el6_4 |
| Red Hat:enterprise_linux:6::server | java-1.6.0-openjdk | 0 | 1:1.6.0.0-1.62.1.11.11.90.el6_4 |
| Red Hat:enterprise_linux:6::server | java-1.6.0-openjdk-debuginfo | 0 | 1:1.6.0.0-1.62.1.11.11.90.el6_4 |
| Red Hat:enterprise_linux:6::server | java-1.6.0-openjdk-demo | 0 | 1:1.6.0.0-1.62.1.11.11.90.el6_4 |
| Red Hat:enterprise_linux:6::server | java-1.6.0-openjdk-devel | 0 | 1:1.6.0.0-1.62.1.11.11.90.el6_4 |
| Red Hat:enterprise_linux:6::server | java-1.6.0-openjdk-javadoc | 0 | 1:1.6.0.0-1.62.1.11.11.90.el6_4 |
| Red Hat:enterprise_linux:6::server | java-1.6.0-openjdk-src | 0 | 1:1.6.0.0-1.62.1.11.11.90.el6_4 |
| Red Hat:enterprise_linux:6::server | java-1.7.0-openjdk | 0 | 1:1.7.0.25-2.3.10.3.el6_4 |
| Red Hat:enterprise_linux:6::server | java-1.7.0-openjdk-debuginfo | 0 | 1:1.7.0.25-2.3.10.3.el6_4 |
| Red Hat:enterprise_linux:6::server | java-1.7.0-openjdk-demo | 0 | 1:1.7.0.25-2.3.10.3.el6_4 |
| Red Hat:enterprise_linux:6::server | java-1.7.0-openjdk-devel | 0 | 1:1.7.0.25-2.3.10.3.el6_4 |
| Red Hat:enterprise_linux:6::server | java-1.7.0-openjdk-javadoc | 0 | 1:1.7.0.25-2.3.10.3.el6_4 |
| Red Hat:enterprise_linux:6::server | java-1.7.0-openjdk-src | 0 | 1:1.7.0.25-2.3.10.3.el6_4 |
| Red Hat:enterprise_linux:6::workstation | java-1.6.0-openjdk | 0 | 1:1.6.0.0-1.62.1.11.11.90.el6_4 |
| Red Hat:enterprise_linux:6::workstation | java-1.6.0-openjdk-debuginfo | 0 | 1:1.6.0.0-1.62.1.11.11.90.el6_4 |
| Red Hat:enterprise_linux:6::workstation | java-1.6.0-openjdk-demo | 0 | 1:1.6.0.0-1.62.1.11.11.90.el6_4 |
| Red Hat:enterprise_linux:6::workstation | java-1.6.0-openjdk-devel | 0 | 1:1.6.0.0-1.62.1.11.11.90.el6_4 |
| Red Hat:enterprise_linux:6::workstation | java-1.6.0-openjdk-javadoc | 0 | 1:1.6.0.0-1.62.1.11.11.90.el6_4 |
| Red Hat:enterprise_linux:6::workstation | java-1.6.0-openjdk-src | 0 | 1:1.6.0.0-1.62.1.11.11.90.el6_4 |
| Red Hat:enterprise_linux:6::workstation | java-1.7.0-openjdk | 0 | 1:1.7.0.25-2.3.10.3.el6_4 |
| Red Hat:enterprise_linux:6::workstation | java-1.7.0-openjdk-debuginfo | 0 | 1:1.7.0.25-2.3.10.3.el6_4 |
| Red Hat:enterprise_linux:6::workstation | java-1.7.0-openjdk-demo | 0 | 1:1.7.0.25-2.3.10.3.el6_4 |
| Red Hat:enterprise_linux:6::workstation | java-1.7.0-openjdk-devel | 0 | 1:1.7.0.25-2.3.10.3.el6_4 |
| Red Hat:enterprise_linux:6::workstation | java-1.7.0-openjdk-javadoc | 0 | 1:1.7.0.25-2.3.10.3.el6_4 |
| Red Hat:enterprise_linux:6::workstation | java-1.7.0-openjdk-src | 0 | 1:1.7.0.25-2.3.10.3.el6_4 |
| Red Hat:network_satellite:5.4::el5 | java-1.6.0-ibm | 0 | 1:1.6.0.14.0-1jpp.1.el5_9 |
| Red Hat:network_satellite:5.4::el5 | java-1.6.0-ibm-devel | 0 | 1:1.6.0.14.0-1jpp.1.el5_9 |
| Red Hat:network_satellite:5.4::el6 | java-1.6.0-ibm | 0 | 1:1.6.0.14.0-1jpp.1.el6_4 |
| Red Hat:network_satellite:5.4::el6 | java-1.6.0-ibm-devel | 0 | 1:1.6.0.14.0-1jpp.1.el6_4 |
| Red Hat:network_satellite:5.5::el5 | java-1.6.0-ibm | 0 | 1:1.6.0.14.0-1jpp.1.el5_9 |
| Red Hat:network_satellite:5.5::el5 | java-1.6.0-ibm-devel | 0 | 1:1.6.0.14.0-1jpp.1.el5_9 |
| Red Hat:network_satellite:5.5::el6 | java-1.6.0-ibm | 0 | 1:1.6.0.14.0-1jpp.1.el6_4 |
| Red Hat:network_satellite:5.5::el6 | java-1.6.0-ibm-devel | 0 | 1:1.6.0.14.0-1jpp.1.el6_4 |
| Red Hat:rhel_extras:5::server | java-1.5.0-ibm | 0 | 1:1.5.0.16.3-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.5.0-ibm-accessibility | 0 | 1:1.5.0.16.3-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.5.0-ibm-demo | 0 | 1:1.5.0.16.3-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.5.0-ibm-devel | 0 | 1:1.5.0.16.3-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.5.0-ibm-javacomm | 0 | 1:1.5.0.16.3-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.5.0-ibm-jdbc | 0 | 1:1.5.0.16.3-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.5.0-ibm-plugin | 0 | 1:1.5.0.16.3-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.5.0-ibm-src | 0 | 1:1.5.0.16.3-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm | 0 | 1:1.6.0.14.0-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm-accessibility | 0 | 1:1.6.0.14.0-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm-demo | 0 | 1:1.6.0.14.0-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm-devel | 0 | 1:1.6.0.14.0-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm-javacomm | 0 | 1:1.6.0.14.0-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm-jdbc | 0 | 1:1.6.0.14.0-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm-plugin | 0 | 1:1.6.0.14.0-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm-src | 0 | 1:1.6.0.14.0-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.7.0-ibm | 0 | 1:1.7.0.5.0-1jpp.2.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.7.0-ibm-demo | 0 | 1:1.7.0.5.0-1jpp.2.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.7.0-ibm-devel | 0 | 1:1.7.0.5.0-1jpp.2.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.7.0-ibm-jdbc | 0 | 1:1.7.0.5.0-1jpp.2.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.7.0-ibm-plugin | 0 | 1:1.7.0.5.0-1jpp.2.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.7.0-ibm-src | 0 | 1:1.7.0.5.0-1jpp.2.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.7.0-oracle | 0 | 1:1.7.0.25-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.7.0-oracle-devel | 0 | 1:1.7.0.25-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.7.0-oracle-javafx | 0 | 1:1.7.0.25-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.7.0-oracle-jdbc | 0 | 1:1.7.0.25-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.7.0-oracle-plugin | 0 | 1:1.7.0.25-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.7.0-oracle-src | 0 | 1:1.7.0.25-1jpp.1.el5_9 |
| Red Hat:rhel_extras:6 | java-1.5.0-ibm | 0 | 1:1.5.0.16.3-1jpp.1.el6_4 |
| Red Hat:rhel_extras:6 | java-1.5.0-ibm-demo | 0 | 1:1.5.0.16.3-1jpp.1.el6_4 |
| Red Hat:rhel_extras:6 | java-1.5.0-ibm-devel | 0 | 1:1.5.0.16.3-1jpp.1.el6_4 |
| Red Hat:rhel_extras:6 | java-1.5.0-ibm-javacomm | 0 | 1:1.5.0.16.3-1jpp.1.el6_4 |
| Red Hat:rhel_extras:6 | java-1.5.0-ibm-jdbc | 0 | 1:1.5.0.16.3-1jpp.1.el6_4 |
| Red Hat:rhel_extras:6 | java-1.5.0-ibm-plugin | 0 | 1:1.5.0.16.3-1jpp.1.el6_4 |
| Red Hat:rhel_extras:6 | java-1.5.0-ibm-src | 0 | 1:1.5.0.16.3-1jpp.1.el6_4 |
| Red Hat:rhel_extras:6 | java-1.6.0-ibm | 0 | 1:1.6.0.14.0-1jpp.1.el6_4 |
| Red Hat:rhel_extras:6 | java-1.6.0-ibm-demo | 0 | 1:1.6.0.14.0-1jpp.1.el6_4 |
| Red Hat:rhel_extras:6 | java-1.6.0-ibm-devel | 0 | 1:1.6.0.14.0-1jpp.1.el6_4 |
| Red Hat:rhel_extras:6 | java-1.6.0-ibm-javacomm | 0 | 1:1.6.0.14.0-1jpp.1.el6_4 |
| Red Hat:rhel_extras:6 | java-1.6.0-ibm-jdbc | 0 | 1:1.6.0.14.0-1jpp.1.el6_4 |
| Red Hat:rhel_extras:6 | java-1.6.0-ibm-plugin | 0 | 1:1.6.0.14.0-1jpp.1.el6_4 |
| Red Hat:rhel_extras:6 | java-1.6.0-ibm-src | 0 | 1:1.6.0.14.0-1jpp.1.el6_4 |
| Red Hat:rhel_extras:6 | java-1.7.0-ibm | 0 | 1:1.7.0.5.0-1jpp.2.el6_4 |
| Red Hat:rhel_extras:6 | java-1.7.0-ibm-demo | 0 | 1:1.7.0.5.0-1jpp.2.el6_4 |
| Red Hat:rhel_extras:6 | java-1.7.0-ibm-devel | 0 | 1:1.7.0.5.0-1jpp.2.el6_4 |
| Red Hat:rhel_extras:6 | java-1.7.0-ibm-jdbc | 0 | 1:1.7.0.5.0-1jpp.2.el6_4 |
| Red Hat:rhel_extras:6 | java-1.7.0-ibm-plugin | 0 | 1:1.7.0.5.0-1jpp.2.el6_4 |
| Red Hat:rhel_extras:6 | java-1.7.0-ibm-src | 0 | 1:1.7.0.5.0-1jpp.2.el6_4 |
| Red Hat:rhel_extras:6 | java-1.7.0-oracle | 0 | 1:1.7.0.25-1jpp.1.el6_4 |
| Red Hat:rhel_extras:6 | java-1.7.0-oracle-devel | 0 | 1:1.7.0.25-1jpp.1.el6_4 |
| Red Hat:rhel_extras:6 | java-1.7.0-oracle-javafx | 0 | 1:1.7.0.25-1jpp.1.el6_4 |
| Red Hat:rhel_extras:6 | java-1.7.0-oracle-jdbc | 0 | 1:1.7.0.25-1jpp.1.el6_4 |
| Red Hat:rhel_extras:6 | java-1.7.0-oracle-plugin | 0 | 1:1.7.0.25-1jpp.1.el6_4 |
| Red Hat:rhel_extras:6 | java-1.7.0-oracle-src | 0 | 1:1.7.0.25-1jpp.1.el6_4 |
| Red Hat:rhel_extras_oracle_java:5 | java-1.6.0-sun | 0 | 1:1.6.0.75-1jpp.3.el5_10 |
| Red Hat:rhel_extras_oracle_java:5 | java-1.6.0-sun-demo | 0 | 1:1.6.0.75-1jpp.3.el5_10 |
| Red Hat:rhel_extras_oracle_java:5 | java-1.6.0-sun-devel | 0 | 1:1.6.0.75-1jpp.3.el5_10 |
| Red Hat:rhel_extras_oracle_java:5 | java-1.6.0-sun-jdbc | 0 | 1:1.6.0.75-1jpp.3.el5_10 |
| Red Hat:rhel_extras_oracle_java:5 | java-1.6.0-sun-plugin | 0 | 1:1.6.0.75-1jpp.3.el5_10 |
| Red Hat:rhel_extras_oracle_java:5 | java-1.6.0-sun-src | 0 | 1:1.6.0.75-1jpp.3.el5_10 |
| Red Hat:rhel_extras_oracle_java:6 | java-1.6.0-sun | 0 | 1:1.6.0.75-1jpp.1.el6_5 |
| Red Hat:rhel_extras_oracle_java:6 | java-1.6.0-sun-demo | 0 | 1:1.6.0.75-1jpp.1.el6_5 |
| Red Hat:rhel_extras_oracle_java:6 | java-1.6.0-sun-devel | 0 | 1:1.6.0.75-1jpp.1.el6_5 |
| Red Hat:rhel_extras_oracle_java:6 | java-1.6.0-sun-jdbc | 0 | 1:1.6.0.75-1jpp.1.el6_5 |
| Red Hat:rhel_extras_oracle_java:6 | java-1.6.0-sun-plugin | 0 | 1:1.6.0.75-1jpp.1.el6_5 |
| Red Hat:rhel_extras_oracle_java:6 | java-1.6.0-sun-src | 0 | 1:1.6.0.75-1jpp.1.el6_5 |
| openSUSE:Tumbleweed | java-1_7_0-openjdk | 0 | 1.7.0.121-1.1 |
Related vulnerabilities
- CVE-2015-8472 Buffer overflow in the png_set_PLTE function in libpng before 1.0.65, 1.1.x and 1.2.x… Also affects openjdk-6
- CVE-2016-0483 Unspecified vulnerability in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65… Also affects openjdk-6
- CVE-2015-7575 Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before… Also affects openjdk-6
- CVE-2015-8126 Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in… Also affects openjdk-6
- CVE-2015-4734 Unspecified vulnerability in Oracle Java SE 6u101, 7u85 and 8u60, and Java SE Embedded… Also affects openjdk-6
- CVE-2015-4748 Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and… Also affects openjdk-6
- CVE-2015-2590 Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded… Also affects openjdk-6
- CVE-2015-4000 The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server… Also affects openjdk-6