critique
CVE-2015-2590
OpenJDK: deserialization issue in ObjectInputStream.readSerialData() (Libraries, 8076401)
Dans la Trivy database depuis au moins le 24 oct. 2026, 07:11 UTCLa date d'entrée avant ce build n'est pas enregistrée.
Sévérité par source
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat6.8AV:N/AC:M/Au:N/C:P/I:P/A:P
Le label propre à Trivy est CRITICAL. Critique selon NVD, Red Hat, Photon OS. Plus basse selon Amazon (élevée), Oracle (élevée), Ubuntu (moyenne).
Description
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-4732.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| Photon OS 4.0 | openjdk8, openjdk8-doc, openjdk8-sample et 2 autres | 1.8.0.382-1.ph4 |
| amazon linux 1 | java-1.6.0-openjdk, java-1.6.0-openjdk-debuginfo, java-1.6.0-openjdk-demo et 16 autres | 1:1.6.0.36-1.13.8.1.71.amzn1 et 2 autres |
| debian 7 | openjdk-6, openjdk-7 | 6b36-1.13.8-1~deb7u1 et 1 autres |
| debian 8 | openjdk-7 | 7u79-2.5.6-1~deb8u1 |
| Oracle Linux 5 | java-1.6.0-openjdk, java-1.6.0-openjdk-demo, java-1.6.0-openjdk-devel et 7 autres | 1:1.6.0.36-1.13.8.1.0.1.el5_11 et 1 autres |
| Oracle Linux 6 | java-1.6.0-openjdk, java-1.6.0-openjdk-demo, java-1.6.0-openjdk-devel et 13 autres | 1:1.6.0.36-1.13.8.1.el6_7 et 2 autres |
| Oracle Linux 7 | java-1.6.0-openjdk, java-1.6.0-openjdk-demo, java-1.6.0-openjdk-devel et 16 autres | 1:1.6.0.36-1.13.8.1.el7_1 et 2 autres |
| ubuntu 12.04 | openjdk-6, openjdk-7 | 6b36-1.13.8-0ubuntu1~12.04 et 1 autres |
| ubuntu 14.04 | openjdk-6, openjdk-7 | 6b36-1.13.8-0ubuntu1~14.04 et 1 autres |
| ubuntu 15.04 | openjdk-6, openjdk-7 | 6b36-1.13.8-0ubuntu1~15.04.1 et 1 autres |
| ubuntu 15.10 | openjdk-8 | 8u66-b17-1 |
Afficher les 79 entrées de 11 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| Photon OS 4.0 | openjdk8 | 1.8.0.382-1.ph4 |
| Photon OS 4.0 | openjdk8-doc | 1.8.0.382-1.ph4 |
| Photon OS 4.0 | openjdk8-sample | 1.8.0.382-1.ph4 |
| Photon OS 4.0 | openjdk8-src | 1.8.0.382-1.ph4 |
| Photon OS 4.0 | openjre8 | 1.8.0.382-1.ph4 |
| amazon linux 1 | java-1.6.0-openjdk | 1:1.6.0.36-1.13.8.1.71.amzn1 |
| amazon linux 1 | java-1.6.0-openjdk-debuginfo | 1:1.6.0.36-1.13.8.1.71.amzn1 |
| amazon linux 1 | java-1.6.0-openjdk-demo | 1:1.6.0.36-1.13.8.1.71.amzn1 |
| amazon linux 1 | java-1.6.0-openjdk-devel | 1:1.6.0.36-1.13.8.1.71.amzn1 |
| amazon linux 1 | java-1.6.0-openjdk-javadoc | 1:1.6.0.36-1.13.8.1.71.amzn1 |
| amazon linux 1 | java-1.6.0-openjdk-src | 1:1.6.0.36-1.13.8.1.71.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk | 1:1.7.0.85-2.6.1.3.61.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk-debuginfo | 1:1.7.0.85-2.6.1.3.61.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk-demo | 1:1.7.0.85-2.6.1.3.61.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk-devel | 1:1.7.0.85-2.6.1.3.61.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk-javadoc | 1:1.7.0.85-2.6.1.3.61.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk-src | 1:1.7.0.85-2.6.1.3.61.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk | 1:1.8.0.51-1.b16.6.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-debuginfo | 1:1.8.0.51-1.b16.6.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-demo | 1:1.8.0.51-1.b16.6.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-devel | 1:1.8.0.51-1.b16.6.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-headless | 1:1.8.0.51-1.b16.6.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-javadoc | 1:1.8.0.51-1.b16.6.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-src | 1:1.8.0.51-1.b16.6.amzn1 |
| debian 7 | openjdk-6 | 6b36-1.13.8-1~deb7u1 |
| debian 7 | openjdk-7 | 7u79-2.5.6-1~deb7u1 |
| debian 8 | openjdk-7 | 7u79-2.5.6-1~deb8u1 |
| Oracle Linux 5 | java-1.6.0-openjdk | 1:1.6.0.36-1.13.8.1.0.1.el5_11 |
| Oracle Linux 5 | java-1.6.0-openjdk-demo | 1:1.6.0.36-1.13.8.1.0.1.el5_11 |
| Oracle Linux 5 | java-1.6.0-openjdk-devel | 1:1.6.0.36-1.13.8.1.0.1.el5_11 |
| Oracle Linux 5 | java-1.6.0-openjdk-javadoc | 1:1.6.0.36-1.13.8.1.0.1.el5_11 |
| Oracle Linux 5 | java-1.6.0-openjdk-src | 1:1.6.0.36-1.13.8.1.0.1.el5_11 |
| Oracle Linux 5 | java-1.7.0-openjdk | 1:1.7.0.85-2.6.1.3.0.1.el5_11 |
| Oracle Linux 5 | java-1.7.0-openjdk-demo | 1:1.7.0.85-2.6.1.3.0.1.el5_11 |
| Oracle Linux 5 | java-1.7.0-openjdk-devel | 1:1.7.0.85-2.6.1.3.0.1.el5_11 |
| Oracle Linux 5 | java-1.7.0-openjdk-javadoc | 1:1.7.0.85-2.6.1.3.0.1.el5_11 |
| Oracle Linux 5 | java-1.7.0-openjdk-src | 1:1.7.0.85-2.6.1.3.0.1.el5_11 |
| Oracle Linux 6 | java-1.6.0-openjdk | 1:1.6.0.36-1.13.8.1.el6_7 |
| Oracle Linux 6 | java-1.6.0-openjdk-demo | 1:1.6.0.36-1.13.8.1.el6_7 |
| Oracle Linux 6 | java-1.6.0-openjdk-devel | 1:1.6.0.36-1.13.8.1.el6_7 |
| Oracle Linux 6 | java-1.6.0-openjdk-javadoc | 1:1.6.0.36-1.13.8.1.el6_7 |
| Oracle Linux 6 | java-1.6.0-openjdk-src | 1:1.6.0.36-1.13.8.1.el6_7 |
| Oracle Linux 6 | java-1.7.0-openjdk | 1:1.7.0.85-2.6.1.3.0.1.el6_6 |
| Oracle Linux 6 | java-1.7.0-openjdk-demo | 1:1.7.0.85-2.6.1.3.0.1.el6_6 |
| Oracle Linux 6 | java-1.7.0-openjdk-devel | 1:1.7.0.85-2.6.1.3.0.1.el6_6 |
| Oracle Linux 6 | java-1.7.0-openjdk-javadoc | 1:1.7.0.85-2.6.1.3.0.1.el6_6 |
| Oracle Linux 6 | java-1.7.0-openjdk-src | 1:1.7.0.85-2.6.1.3.0.1.el6_6 |
| Oracle Linux 6 | java-1.8.0-openjdk | 1:1.8.0.51-0.b16.el6_6 |
| Oracle Linux 6 | java-1.8.0-openjdk-demo | 1:1.8.0.51-0.b16.el6_6 |
| Oracle Linux 6 | java-1.8.0-openjdk-devel | 1:1.8.0.51-0.b16.el6_6 |
| Oracle Linux 6 | java-1.8.0-openjdk-headless | 1:1.8.0.51-0.b16.el6_6 |
| Oracle Linux 6 | java-1.8.0-openjdk-javadoc | 1:1.8.0.51-0.b16.el6_6 |
| Oracle Linux 6 | java-1.8.0-openjdk-src | 1:1.8.0.51-0.b16.el6_6 |
| Oracle Linux 7 | java-1.6.0-openjdk | 1:1.6.0.36-1.13.8.1.el7_1 |
| Oracle Linux 7 | java-1.6.0-openjdk-demo | 1:1.6.0.36-1.13.8.1.el7_1 |
| Oracle Linux 7 | java-1.6.0-openjdk-devel | 1:1.6.0.36-1.13.8.1.el7_1 |
| Oracle Linux 7 | java-1.6.0-openjdk-javadoc | 1:1.6.0.36-1.13.8.1.el7_1 |
| Oracle Linux 7 | java-1.6.0-openjdk-src | 1:1.6.0.36-1.13.8.1.el7_1 |
| Oracle Linux 7 | java-1.7.0-openjdk | 1:1.7.0.85-2.6.1.2.0.1.el7_1 |
| Oracle Linux 7 | java-1.7.0-openjdk-accessibility | 1:1.7.0.85-2.6.1.2.0.1.el7_1 |
| Oracle Linux 7 | java-1.7.0-openjdk-demo | 1:1.7.0.85-2.6.1.2.0.1.el7_1 |
| Oracle Linux 7 | java-1.7.0-openjdk-devel | 1:1.7.0.85-2.6.1.2.0.1.el7_1 |
| Oracle Linux 7 | java-1.7.0-openjdk-headless | 1:1.7.0.85-2.6.1.2.0.1.el7_1 |
| Oracle Linux 7 | java-1.7.0-openjdk-javadoc | 1:1.7.0.85-2.6.1.2.0.1.el7_1 |
| Oracle Linux 7 | java-1.7.0-openjdk-src | 1:1.7.0.85-2.6.1.2.0.1.el7_1 |
| Oracle Linux 7 | java-1.8.0-openjdk | 1:1.8.0.51-1.b16.el7_1 |
| Oracle Linux 7 | java-1.8.0-openjdk-accessibility | 1:1.8.0.51-1.b16.el7_1 |
| Oracle Linux 7 | java-1.8.0-openjdk-demo | 1:1.8.0.51-1.b16.el7_1 |
| Oracle Linux 7 | java-1.8.0-openjdk-devel | 1:1.8.0.51-1.b16.el7_1 |
| Oracle Linux 7 | java-1.8.0-openjdk-headless | 1:1.8.0.51-1.b16.el7_1 |
| Oracle Linux 7 | java-1.8.0-openjdk-javadoc | 1:1.8.0.51-1.b16.el7_1 |
| Oracle Linux 7 | java-1.8.0-openjdk-src | 1:1.8.0.51-1.b16.el7_1 |
| ubuntu 12.04 | openjdk-6 | 6b36-1.13.8-0ubuntu1~12.04 |
| ubuntu 12.04 | openjdk-7 | 7u79-2.5.6-0ubuntu1.12.04.1 |
| ubuntu 14.04 | openjdk-6 | 6b36-1.13.8-0ubuntu1~14.04 |
| ubuntu 14.04 | openjdk-7 | 7u79-2.5.6-0ubuntu1.14.04.1 |
| ubuntu 15.04 | openjdk-6 | 6b36-1.13.8-0ubuntu1~15.04.1 |
| ubuntu 15.04 | openjdk-7 | 7u79-2.5.6-0ubuntu1.15.04.1 |
| ubuntu 15.10 | openjdk-8 | 8u66-b17-1 |
Références
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html
- http://rhn.redhat.com/errata/RHSA-2015-1228.html
- http://rhn.redhat.com/errata/RHSA-2015-1229.html
- http://rhn.redhat.com/errata/RHSA-2015-1230.html
- http://rhn.redhat.com/errata/RHSA-2015-1241.html
Les 35 références
- http://rhn.redhat.com/errata/RHSA-2015-1242.html
- http://rhn.redhat.com/errata/RHSA-2015-1243.html
- http://rhn.redhat.com/errata/RHSA-2015-1485.html
- http://rhn.redhat.com/errata/RHSA-2015-1486.html
- http://rhn.redhat.com/errata/RHSA-2015-1488.html
- http://rhn.redhat.com/errata/RHSA-2015-1526.html
- http://rhn.redhat.com/errata/RHSA-2015-1544.html
- http://rhn.redhat.com/errata/RHSA-2015-1604.html
- http://www.debian.org/security/2015/dsa-3316
- http://www.debian.org/security/2015/dsa-3339
- http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
- http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html#AppendixJAVA
- http://www.securityfocus.com/bid/75818
- http://www.securitytracker.com/id/1032910
- http://www.ubuntu.com/usn/USN-2696-1
- http://www.ubuntu.com/usn/USN-2706-1
- https://access.redhat.com/security/cve/CVE-2015-2590
- https://linux.oracle.com/cve/CVE-2015-2590.html
- https://linux.oracle.com/errata/ELSA-2015-1526.html
- https://nvd.nist.gov/vuln/detail/CVE-2015-2590
- https://security.gentoo.org/glsa/201603-11
- https://security.gentoo.org/glsa/201603-14
- https://ubuntu.com/security/notices/USN-2696-1
- https://ubuntu.com/security/notices/USN-2706-1
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-2590
- https://www.cve.org/CVERecord?id=CVE-2015-2590