CVE-2015-0460

Impact:
Critical
Public Date:
2015-04-14
Bugzilla:
1211285: CVE-2015-0460 OpenJDK: incorrect handling of phantom references (Hotspot, 8071931)
A flaw was found in the way the Hotspot component in OpenJDK handled phantom references. An untrusted Java application or applet could use this flaw to corrupt the Java Virtual Machine memory and, possibly, execute arbitrary code, bypassing Java sandbox restrictions.

Find out more about CVE-2015-0460 from the MITRE CVE dictionary dictionary and NIST NVD.

CVSS v2 metrics

Base Score 6.8
Base Metrics AV:N/AC:M/Au:N/C:P/I:P/A:P
Access Vector Network
Access Complexity Medium
Authentication None
Confidentiality Impact Partial
Integrity Impact Partial
Availability Impact Partial

Find out more about Red Hat support for the Common Vulnerability Scoring System (CVSS).

Red Hat Security Errata

Platform Errata Release Date
Oracle Java for Red Hat Enterprise Linux 6 (java-1.6.0-sun) RHSA-2015:0858 2015-04-20
Oracle Java for Red Hat Enterprise Linux 7 (java-1.8.0-oracle) RHSA-2015:0854 2015-04-17
Oracle Java for Red Hat Enterprise Linux 5 (java-1.6.0-sun) RHSA-2015:0858 2015-04-20
Red Hat Enterprise Linux 7 (java-1.7.0-openjdk) RHSA-2015:0806 2015-04-15
Red Hat Enterprise Linux 7 (java-1.8.0-openjdk) RHSA-2015:0809 2015-04-15
Red Hat Enterprise Linux 7 (java-1.6.0-openjdk) RHSA-2015:0808 2015-04-15
Oracle Java for Red Hat Enterprise Linux 6 (java-1.8.0-oracle) RHSA-2015:0854 2015-04-17
Red Hat Enterprise Linux 5 (java-1.7.0-openjdk) RHSA-2015:0807 2015-04-14
Oracle Java for Red Hat Enterprise Linux 7 (java-1.6.0-sun) RHSA-2015:0858 2015-04-20
Red Hat Enterprise Linux 6 (java-1.7.0-openjdk) RHSA-2015:0806 2015-04-15
Oracle Java for Red Hat Enterprise Linux 7 (java-1.7.0-oracle) RHSA-2015:0857 2015-04-20
Oracle Java for Red Hat Enterprise Linux 5 (java-1.7.0-oracle) RHSA-2015:0857 2015-04-20
Oracle Java for Red Hat Enterprise Linux 6 (java-1.7.0-oracle) RHSA-2015:0857 2015-04-20
Red Hat Enterprise Linux 6 (java-1.6.0-openjdk) RHSA-2015:0808 2015-04-15
Red Hat Enterprise Linux 6 (java-1.8.0-openjdk) RHSA-2015:0809 2015-04-15
Red Hat Enterprise Linux 5 (java-1.6.0-openjdk) RHSA-2015:0808 2015-04-15

External References

Last Modified