kritisch
CVE-2015-2590
OpenJDK: deserialization issue in ObjectInputStream.readSerialData() (Libraries, 8076401)
In der Trivy Database seit spätestens 24. Okt. 2026, 07:11 UTCWann der Eintrag vor diesem Build hinzukam, ist nicht erfasst.
Einstufung nach Quelle
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat6.8AV:N/AC:M/Au:N/C:P/I:P/A:P
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD, Red Hat, Photon OS. Niedriger laut Amazon (hoch), Oracle (hoch), Ubuntu (mittel).
Beschreibung
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-4732.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| Photon OS 4.0 | openjdk8, openjdk8-doc, openjdk8-sample und 2 weitere | 1.8.0.382-1.ph4 |
| amazon linux 1 | java-1.6.0-openjdk, java-1.6.0-openjdk-debuginfo, java-1.6.0-openjdk-demo und 16 weitere | 1:1.6.0.36-1.13.8.1.71.amzn1 und 2 weitere |
| debian 7 | openjdk-6, openjdk-7 | 6b36-1.13.8-1~deb7u1 und 1 weitere |
| debian 8 | openjdk-7 | 7u79-2.5.6-1~deb8u1 |
| Oracle Linux 5 | java-1.6.0-openjdk, java-1.6.0-openjdk-demo, java-1.6.0-openjdk-devel und 7 weitere | 1:1.6.0.36-1.13.8.1.0.1.el5_11 und 1 weitere |
| Oracle Linux 6 | java-1.6.0-openjdk, java-1.6.0-openjdk-demo, java-1.6.0-openjdk-devel und 13 weitere | 1:1.6.0.36-1.13.8.1.el6_7 und 2 weitere |
| Oracle Linux 7 | java-1.6.0-openjdk, java-1.6.0-openjdk-demo, java-1.6.0-openjdk-devel und 16 weitere | 1:1.6.0.36-1.13.8.1.el7_1 und 2 weitere |
| ubuntu 12.04 | openjdk-6, openjdk-7 | 6b36-1.13.8-0ubuntu1~12.04 und 1 weitere |
| ubuntu 14.04 | openjdk-6, openjdk-7 | 6b36-1.13.8-0ubuntu1~14.04 und 1 weitere |
| ubuntu 15.04 | openjdk-6, openjdk-7 | 6b36-1.13.8-0ubuntu1~15.04.1 und 1 weitere |
| ubuntu 15.10 | openjdk-8 | 8u66-b17-1 |
Alle 79 Einträge aus 11 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| Photon OS 4.0 | openjdk8 | 1.8.0.382-1.ph4 |
| Photon OS 4.0 | openjdk8-doc | 1.8.0.382-1.ph4 |
| Photon OS 4.0 | openjdk8-sample | 1.8.0.382-1.ph4 |
| Photon OS 4.0 | openjdk8-src | 1.8.0.382-1.ph4 |
| Photon OS 4.0 | openjre8 | 1.8.0.382-1.ph4 |
| amazon linux 1 | java-1.6.0-openjdk | 1:1.6.0.36-1.13.8.1.71.amzn1 |
| amazon linux 1 | java-1.6.0-openjdk-debuginfo | 1:1.6.0.36-1.13.8.1.71.amzn1 |
| amazon linux 1 | java-1.6.0-openjdk-demo | 1:1.6.0.36-1.13.8.1.71.amzn1 |
| amazon linux 1 | java-1.6.0-openjdk-devel | 1:1.6.0.36-1.13.8.1.71.amzn1 |
| amazon linux 1 | java-1.6.0-openjdk-javadoc | 1:1.6.0.36-1.13.8.1.71.amzn1 |
| amazon linux 1 | java-1.6.0-openjdk-src | 1:1.6.0.36-1.13.8.1.71.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk | 1:1.7.0.85-2.6.1.3.61.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk-debuginfo | 1:1.7.0.85-2.6.1.3.61.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk-demo | 1:1.7.0.85-2.6.1.3.61.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk-devel | 1:1.7.0.85-2.6.1.3.61.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk-javadoc | 1:1.7.0.85-2.6.1.3.61.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk-src | 1:1.7.0.85-2.6.1.3.61.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk | 1:1.8.0.51-1.b16.6.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-debuginfo | 1:1.8.0.51-1.b16.6.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-demo | 1:1.8.0.51-1.b16.6.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-devel | 1:1.8.0.51-1.b16.6.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-headless | 1:1.8.0.51-1.b16.6.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-javadoc | 1:1.8.0.51-1.b16.6.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-src | 1:1.8.0.51-1.b16.6.amzn1 |
| debian 7 | openjdk-6 | 6b36-1.13.8-1~deb7u1 |
| debian 7 | openjdk-7 | 7u79-2.5.6-1~deb7u1 |
| debian 8 | openjdk-7 | 7u79-2.5.6-1~deb8u1 |
| Oracle Linux 5 | java-1.6.0-openjdk | 1:1.6.0.36-1.13.8.1.0.1.el5_11 |
| Oracle Linux 5 | java-1.6.0-openjdk-demo | 1:1.6.0.36-1.13.8.1.0.1.el5_11 |
| Oracle Linux 5 | java-1.6.0-openjdk-devel | 1:1.6.0.36-1.13.8.1.0.1.el5_11 |
| Oracle Linux 5 | java-1.6.0-openjdk-javadoc | 1:1.6.0.36-1.13.8.1.0.1.el5_11 |
| Oracle Linux 5 | java-1.6.0-openjdk-src | 1:1.6.0.36-1.13.8.1.0.1.el5_11 |
| Oracle Linux 5 | java-1.7.0-openjdk | 1:1.7.0.85-2.6.1.3.0.1.el5_11 |
| Oracle Linux 5 | java-1.7.0-openjdk-demo | 1:1.7.0.85-2.6.1.3.0.1.el5_11 |
| Oracle Linux 5 | java-1.7.0-openjdk-devel | 1:1.7.0.85-2.6.1.3.0.1.el5_11 |
| Oracle Linux 5 | java-1.7.0-openjdk-javadoc | 1:1.7.0.85-2.6.1.3.0.1.el5_11 |
| Oracle Linux 5 | java-1.7.0-openjdk-src | 1:1.7.0.85-2.6.1.3.0.1.el5_11 |
| Oracle Linux 6 | java-1.6.0-openjdk | 1:1.6.0.36-1.13.8.1.el6_7 |
| Oracle Linux 6 | java-1.6.0-openjdk-demo | 1:1.6.0.36-1.13.8.1.el6_7 |
| Oracle Linux 6 | java-1.6.0-openjdk-devel | 1:1.6.0.36-1.13.8.1.el6_7 |
| Oracle Linux 6 | java-1.6.0-openjdk-javadoc | 1:1.6.0.36-1.13.8.1.el6_7 |
| Oracle Linux 6 | java-1.6.0-openjdk-src | 1:1.6.0.36-1.13.8.1.el6_7 |
| Oracle Linux 6 | java-1.7.0-openjdk | 1:1.7.0.85-2.6.1.3.0.1.el6_6 |
| Oracle Linux 6 | java-1.7.0-openjdk-demo | 1:1.7.0.85-2.6.1.3.0.1.el6_6 |
| Oracle Linux 6 | java-1.7.0-openjdk-devel | 1:1.7.0.85-2.6.1.3.0.1.el6_6 |
| Oracle Linux 6 | java-1.7.0-openjdk-javadoc | 1:1.7.0.85-2.6.1.3.0.1.el6_6 |
| Oracle Linux 6 | java-1.7.0-openjdk-src | 1:1.7.0.85-2.6.1.3.0.1.el6_6 |
| Oracle Linux 6 | java-1.8.0-openjdk | 1:1.8.0.51-0.b16.el6_6 |
| Oracle Linux 6 | java-1.8.0-openjdk-demo | 1:1.8.0.51-0.b16.el6_6 |
| Oracle Linux 6 | java-1.8.0-openjdk-devel | 1:1.8.0.51-0.b16.el6_6 |
| Oracle Linux 6 | java-1.8.0-openjdk-headless | 1:1.8.0.51-0.b16.el6_6 |
| Oracle Linux 6 | java-1.8.0-openjdk-javadoc | 1:1.8.0.51-0.b16.el6_6 |
| Oracle Linux 6 | java-1.8.0-openjdk-src | 1:1.8.0.51-0.b16.el6_6 |
| Oracle Linux 7 | java-1.6.0-openjdk | 1:1.6.0.36-1.13.8.1.el7_1 |
| Oracle Linux 7 | java-1.6.0-openjdk-demo | 1:1.6.0.36-1.13.8.1.el7_1 |
| Oracle Linux 7 | java-1.6.0-openjdk-devel | 1:1.6.0.36-1.13.8.1.el7_1 |
| Oracle Linux 7 | java-1.6.0-openjdk-javadoc | 1:1.6.0.36-1.13.8.1.el7_1 |
| Oracle Linux 7 | java-1.6.0-openjdk-src | 1:1.6.0.36-1.13.8.1.el7_1 |
| Oracle Linux 7 | java-1.7.0-openjdk | 1:1.7.0.85-2.6.1.2.0.1.el7_1 |
| Oracle Linux 7 | java-1.7.0-openjdk-accessibility | 1:1.7.0.85-2.6.1.2.0.1.el7_1 |
| Oracle Linux 7 | java-1.7.0-openjdk-demo | 1:1.7.0.85-2.6.1.2.0.1.el7_1 |
| Oracle Linux 7 | java-1.7.0-openjdk-devel | 1:1.7.0.85-2.6.1.2.0.1.el7_1 |
| Oracle Linux 7 | java-1.7.0-openjdk-headless | 1:1.7.0.85-2.6.1.2.0.1.el7_1 |
| Oracle Linux 7 | java-1.7.0-openjdk-javadoc | 1:1.7.0.85-2.6.1.2.0.1.el7_1 |
| Oracle Linux 7 | java-1.7.0-openjdk-src | 1:1.7.0.85-2.6.1.2.0.1.el7_1 |
| Oracle Linux 7 | java-1.8.0-openjdk | 1:1.8.0.51-1.b16.el7_1 |
| Oracle Linux 7 | java-1.8.0-openjdk-accessibility | 1:1.8.0.51-1.b16.el7_1 |
| Oracle Linux 7 | java-1.8.0-openjdk-demo | 1:1.8.0.51-1.b16.el7_1 |
| Oracle Linux 7 | java-1.8.0-openjdk-devel | 1:1.8.0.51-1.b16.el7_1 |
| Oracle Linux 7 | java-1.8.0-openjdk-headless | 1:1.8.0.51-1.b16.el7_1 |
| Oracle Linux 7 | java-1.8.0-openjdk-javadoc | 1:1.8.0.51-1.b16.el7_1 |
| Oracle Linux 7 | java-1.8.0-openjdk-src | 1:1.8.0.51-1.b16.el7_1 |
| ubuntu 12.04 | openjdk-6 | 6b36-1.13.8-0ubuntu1~12.04 |
| ubuntu 12.04 | openjdk-7 | 7u79-2.5.6-0ubuntu1.12.04.1 |
| ubuntu 14.04 | openjdk-6 | 6b36-1.13.8-0ubuntu1~14.04 |
| ubuntu 14.04 | openjdk-7 | 7u79-2.5.6-0ubuntu1.14.04.1 |
| ubuntu 15.04 | openjdk-6 | 6b36-1.13.8-0ubuntu1~15.04.1 |
| ubuntu 15.04 | openjdk-7 | 7u79-2.5.6-0ubuntu1.15.04.1 |
| ubuntu 15.10 | openjdk-8 | 8u66-b17-1 |
Referenzen
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html
- http://rhn.redhat.com/errata/RHSA-2015-1228.html
- http://rhn.redhat.com/errata/RHSA-2015-1229.html
- http://rhn.redhat.com/errata/RHSA-2015-1230.html
- http://rhn.redhat.com/errata/RHSA-2015-1241.html
Alle 35 Referenzen
- http://rhn.redhat.com/errata/RHSA-2015-1242.html
- http://rhn.redhat.com/errata/RHSA-2015-1243.html
- http://rhn.redhat.com/errata/RHSA-2015-1485.html
- http://rhn.redhat.com/errata/RHSA-2015-1486.html
- http://rhn.redhat.com/errata/RHSA-2015-1488.html
- http://rhn.redhat.com/errata/RHSA-2015-1526.html
- http://rhn.redhat.com/errata/RHSA-2015-1544.html
- http://rhn.redhat.com/errata/RHSA-2015-1604.html
- http://www.debian.org/security/2015/dsa-3316
- http://www.debian.org/security/2015/dsa-3339
- http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
- http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html#AppendixJAVA
- http://www.securityfocus.com/bid/75818
- http://www.securitytracker.com/id/1032910
- http://www.ubuntu.com/usn/USN-2696-1
- http://www.ubuntu.com/usn/USN-2706-1
- https://access.redhat.com/security/cve/CVE-2015-2590
- https://linux.oracle.com/cve/CVE-2015-2590.html
- https://linux.oracle.com/errata/ELSA-2015-1526.html
- https://nvd.nist.gov/vuln/detail/CVE-2015-2590
- https://security.gentoo.org/glsa/201603-11
- https://security.gentoo.org/glsa/201603-14
- https://ubuntu.com/security/notices/USN-2696-1
- https://ubuntu.com/security/notices/USN-2706-1
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-2590
- https://www.cve.org/CVERecord?id=CVE-2015-2590