kritik
CVE-2015-2590
OpenJDK: deserialization issue in ObjectInputStream.readSerialData() (Libraries, 8076401)
En geç 24 Eki 2026, 07:11 UTC tarihinden beri Trivy database'indeO derlemeden önce ne zaman girdiği kayıtlı değil.
Kaynağa göre önem derecesi
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat6.8AV:N/AC:M/Au:N/C:P/I:P/A:P
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD, Red Hat, Photon OS. Daha düşük diyenler: Amazon (yüksek), Oracle (yüksek), Ubuntu (orta).
Açıklama
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-4732.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| Photon OS 4.0 | openjdk8, openjdk8-doc, openjdk8-sample ve 2 tane daha | 1.8.0.382-1.ph4 |
| amazon linux 1 | java-1.6.0-openjdk, java-1.6.0-openjdk-debuginfo, java-1.6.0-openjdk-demo ve 16 tane daha | 1:1.6.0.36-1.13.8.1.71.amzn1 ve 2 tane daha |
| debian 7 | openjdk-6, openjdk-7 | 6b36-1.13.8-1~deb7u1 ve 1 tane daha |
| debian 8 | openjdk-7 | 7u79-2.5.6-1~deb8u1 |
| Oracle Linux 5 | java-1.6.0-openjdk, java-1.6.0-openjdk-demo, java-1.6.0-openjdk-devel ve 7 tane daha | 1:1.6.0.36-1.13.8.1.0.1.el5_11 ve 1 tane daha |
| Oracle Linux 6 | java-1.6.0-openjdk, java-1.6.0-openjdk-demo, java-1.6.0-openjdk-devel ve 13 tane daha | 1:1.6.0.36-1.13.8.1.el6_7 ve 2 tane daha |
| Oracle Linux 7 | java-1.6.0-openjdk, java-1.6.0-openjdk-demo, java-1.6.0-openjdk-devel ve 16 tane daha | 1:1.6.0.36-1.13.8.1.el7_1 ve 2 tane daha |
| ubuntu 12.04 | openjdk-6, openjdk-7 | 6b36-1.13.8-0ubuntu1~12.04 ve 1 tane daha |
| ubuntu 14.04 | openjdk-6, openjdk-7 | 6b36-1.13.8-0ubuntu1~14.04 ve 1 tane daha |
| ubuntu 15.04 | openjdk-6, openjdk-7 | 6b36-1.13.8-0ubuntu1~15.04.1 ve 1 tane daha |
| ubuntu 15.10 | openjdk-8 | 8u66-b17-1 |
11 kaynaktaki 79 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| Photon OS 4.0 | openjdk8 | 1.8.0.382-1.ph4 |
| Photon OS 4.0 | openjdk8-doc | 1.8.0.382-1.ph4 |
| Photon OS 4.0 | openjdk8-sample | 1.8.0.382-1.ph4 |
| Photon OS 4.0 | openjdk8-src | 1.8.0.382-1.ph4 |
| Photon OS 4.0 | openjre8 | 1.8.0.382-1.ph4 |
| amazon linux 1 | java-1.6.0-openjdk | 1:1.6.0.36-1.13.8.1.71.amzn1 |
| amazon linux 1 | java-1.6.0-openjdk-debuginfo | 1:1.6.0.36-1.13.8.1.71.amzn1 |
| amazon linux 1 | java-1.6.0-openjdk-demo | 1:1.6.0.36-1.13.8.1.71.amzn1 |
| amazon linux 1 | java-1.6.0-openjdk-devel | 1:1.6.0.36-1.13.8.1.71.amzn1 |
| amazon linux 1 | java-1.6.0-openjdk-javadoc | 1:1.6.0.36-1.13.8.1.71.amzn1 |
| amazon linux 1 | java-1.6.0-openjdk-src | 1:1.6.0.36-1.13.8.1.71.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk | 1:1.7.0.85-2.6.1.3.61.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk-debuginfo | 1:1.7.0.85-2.6.1.3.61.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk-demo | 1:1.7.0.85-2.6.1.3.61.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk-devel | 1:1.7.0.85-2.6.1.3.61.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk-javadoc | 1:1.7.0.85-2.6.1.3.61.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk-src | 1:1.7.0.85-2.6.1.3.61.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk | 1:1.8.0.51-1.b16.6.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-debuginfo | 1:1.8.0.51-1.b16.6.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-demo | 1:1.8.0.51-1.b16.6.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-devel | 1:1.8.0.51-1.b16.6.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-headless | 1:1.8.0.51-1.b16.6.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-javadoc | 1:1.8.0.51-1.b16.6.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-src | 1:1.8.0.51-1.b16.6.amzn1 |
| debian 7 | openjdk-6 | 6b36-1.13.8-1~deb7u1 |
| debian 7 | openjdk-7 | 7u79-2.5.6-1~deb7u1 |
| debian 8 | openjdk-7 | 7u79-2.5.6-1~deb8u1 |
| Oracle Linux 5 | java-1.6.0-openjdk | 1:1.6.0.36-1.13.8.1.0.1.el5_11 |
| Oracle Linux 5 | java-1.6.0-openjdk-demo | 1:1.6.0.36-1.13.8.1.0.1.el5_11 |
| Oracle Linux 5 | java-1.6.0-openjdk-devel | 1:1.6.0.36-1.13.8.1.0.1.el5_11 |
| Oracle Linux 5 | java-1.6.0-openjdk-javadoc | 1:1.6.0.36-1.13.8.1.0.1.el5_11 |
| Oracle Linux 5 | java-1.6.0-openjdk-src | 1:1.6.0.36-1.13.8.1.0.1.el5_11 |
| Oracle Linux 5 | java-1.7.0-openjdk | 1:1.7.0.85-2.6.1.3.0.1.el5_11 |
| Oracle Linux 5 | java-1.7.0-openjdk-demo | 1:1.7.0.85-2.6.1.3.0.1.el5_11 |
| Oracle Linux 5 | java-1.7.0-openjdk-devel | 1:1.7.0.85-2.6.1.3.0.1.el5_11 |
| Oracle Linux 5 | java-1.7.0-openjdk-javadoc | 1:1.7.0.85-2.6.1.3.0.1.el5_11 |
| Oracle Linux 5 | java-1.7.0-openjdk-src | 1:1.7.0.85-2.6.1.3.0.1.el5_11 |
| Oracle Linux 6 | java-1.6.0-openjdk | 1:1.6.0.36-1.13.8.1.el6_7 |
| Oracle Linux 6 | java-1.6.0-openjdk-demo | 1:1.6.0.36-1.13.8.1.el6_7 |
| Oracle Linux 6 | java-1.6.0-openjdk-devel | 1:1.6.0.36-1.13.8.1.el6_7 |
| Oracle Linux 6 | java-1.6.0-openjdk-javadoc | 1:1.6.0.36-1.13.8.1.el6_7 |
| Oracle Linux 6 | java-1.6.0-openjdk-src | 1:1.6.0.36-1.13.8.1.el6_7 |
| Oracle Linux 6 | java-1.7.0-openjdk | 1:1.7.0.85-2.6.1.3.0.1.el6_6 |
| Oracle Linux 6 | java-1.7.0-openjdk-demo | 1:1.7.0.85-2.6.1.3.0.1.el6_6 |
| Oracle Linux 6 | java-1.7.0-openjdk-devel | 1:1.7.0.85-2.6.1.3.0.1.el6_6 |
| Oracle Linux 6 | java-1.7.0-openjdk-javadoc | 1:1.7.0.85-2.6.1.3.0.1.el6_6 |
| Oracle Linux 6 | java-1.7.0-openjdk-src | 1:1.7.0.85-2.6.1.3.0.1.el6_6 |
| Oracle Linux 6 | java-1.8.0-openjdk | 1:1.8.0.51-0.b16.el6_6 |
| Oracle Linux 6 | java-1.8.0-openjdk-demo | 1:1.8.0.51-0.b16.el6_6 |
| Oracle Linux 6 | java-1.8.0-openjdk-devel | 1:1.8.0.51-0.b16.el6_6 |
| Oracle Linux 6 | java-1.8.0-openjdk-headless | 1:1.8.0.51-0.b16.el6_6 |
| Oracle Linux 6 | java-1.8.0-openjdk-javadoc | 1:1.8.0.51-0.b16.el6_6 |
| Oracle Linux 6 | java-1.8.0-openjdk-src | 1:1.8.0.51-0.b16.el6_6 |
| Oracle Linux 7 | java-1.6.0-openjdk | 1:1.6.0.36-1.13.8.1.el7_1 |
| Oracle Linux 7 | java-1.6.0-openjdk-demo | 1:1.6.0.36-1.13.8.1.el7_1 |
| Oracle Linux 7 | java-1.6.0-openjdk-devel | 1:1.6.0.36-1.13.8.1.el7_1 |
| Oracle Linux 7 | java-1.6.0-openjdk-javadoc | 1:1.6.0.36-1.13.8.1.el7_1 |
| Oracle Linux 7 | java-1.6.0-openjdk-src | 1:1.6.0.36-1.13.8.1.el7_1 |
| Oracle Linux 7 | java-1.7.0-openjdk | 1:1.7.0.85-2.6.1.2.0.1.el7_1 |
| Oracle Linux 7 | java-1.7.0-openjdk-accessibility | 1:1.7.0.85-2.6.1.2.0.1.el7_1 |
| Oracle Linux 7 | java-1.7.0-openjdk-demo | 1:1.7.0.85-2.6.1.2.0.1.el7_1 |
| Oracle Linux 7 | java-1.7.0-openjdk-devel | 1:1.7.0.85-2.6.1.2.0.1.el7_1 |
| Oracle Linux 7 | java-1.7.0-openjdk-headless | 1:1.7.0.85-2.6.1.2.0.1.el7_1 |
| Oracle Linux 7 | java-1.7.0-openjdk-javadoc | 1:1.7.0.85-2.6.1.2.0.1.el7_1 |
| Oracle Linux 7 | java-1.7.0-openjdk-src | 1:1.7.0.85-2.6.1.2.0.1.el7_1 |
| Oracle Linux 7 | java-1.8.0-openjdk | 1:1.8.0.51-1.b16.el7_1 |
| Oracle Linux 7 | java-1.8.0-openjdk-accessibility | 1:1.8.0.51-1.b16.el7_1 |
| Oracle Linux 7 | java-1.8.0-openjdk-demo | 1:1.8.0.51-1.b16.el7_1 |
| Oracle Linux 7 | java-1.8.0-openjdk-devel | 1:1.8.0.51-1.b16.el7_1 |
| Oracle Linux 7 | java-1.8.0-openjdk-headless | 1:1.8.0.51-1.b16.el7_1 |
| Oracle Linux 7 | java-1.8.0-openjdk-javadoc | 1:1.8.0.51-1.b16.el7_1 |
| Oracle Linux 7 | java-1.8.0-openjdk-src | 1:1.8.0.51-1.b16.el7_1 |
| ubuntu 12.04 | openjdk-6 | 6b36-1.13.8-0ubuntu1~12.04 |
| ubuntu 12.04 | openjdk-7 | 7u79-2.5.6-0ubuntu1.12.04.1 |
| ubuntu 14.04 | openjdk-6 | 6b36-1.13.8-0ubuntu1~14.04 |
| ubuntu 14.04 | openjdk-7 | 7u79-2.5.6-0ubuntu1.14.04.1 |
| ubuntu 15.04 | openjdk-6 | 6b36-1.13.8-0ubuntu1~15.04.1 |
| ubuntu 15.04 | openjdk-7 | 7u79-2.5.6-0ubuntu1.15.04.1 |
| ubuntu 15.10 | openjdk-8 | 8u66-b17-1 |
Referanslar
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html
- http://rhn.redhat.com/errata/RHSA-2015-1228.html
- http://rhn.redhat.com/errata/RHSA-2015-1229.html
- http://rhn.redhat.com/errata/RHSA-2015-1230.html
- http://rhn.redhat.com/errata/RHSA-2015-1241.html
35 referansın hepsi
- http://rhn.redhat.com/errata/RHSA-2015-1242.html
- http://rhn.redhat.com/errata/RHSA-2015-1243.html
- http://rhn.redhat.com/errata/RHSA-2015-1485.html
- http://rhn.redhat.com/errata/RHSA-2015-1486.html
- http://rhn.redhat.com/errata/RHSA-2015-1488.html
- http://rhn.redhat.com/errata/RHSA-2015-1526.html
- http://rhn.redhat.com/errata/RHSA-2015-1544.html
- http://rhn.redhat.com/errata/RHSA-2015-1604.html
- http://www.debian.org/security/2015/dsa-3316
- http://www.debian.org/security/2015/dsa-3339
- http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
- http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html#AppendixJAVA
- http://www.securityfocus.com/bid/75818
- http://www.securitytracker.com/id/1032910
- http://www.ubuntu.com/usn/USN-2696-1
- http://www.ubuntu.com/usn/USN-2706-1
- https://access.redhat.com/security/cve/CVE-2015-2590
- https://linux.oracle.com/cve/CVE-2015-2590.html
- https://linux.oracle.com/errata/ELSA-2015-1526.html
- https://nvd.nist.gov/vuln/detail/CVE-2015-2590
- https://security.gentoo.org/glsa/201603-11
- https://security.gentoo.org/glsa/201603-14
- https://ubuntu.com/security/notices/USN-2696-1
- https://ubuntu.com/security/notices/USN-2706-1
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-2590
- https://www.cve.org/CVERecord?id=CVE-2015-2590