CVE-2015-4844

CVE-2015-4844

High · published October 22, 2015

CVSS v2.0
10.0
EPSS
8%
Percentile
94.4
In the wild
Unconfirmed
What it is

⚠️ An unspecified vulnerability lurks in Oracle Java SE 6u101, 7u85, and 8u60 that could let attackers mess with your data! Think of it like a sneaky waiter who can tamper with your order right before it goes to the kitchen. Without knowing exactly how this bug works, it could lead to some seriously rotten outcomes! An attacker exploiting this could compromise the confidentiality, integrity, and availability of your applications. In simpler terms, they could access sensitive information, alter the data, or even crash your system. Imagine your well-organized library being turned upside down with no way to find your favorite book!

Put simply

Think of it like a sneaky waiter who can tamper with your order right before it goes to the kitchen. Without knowing exactly how this bug works, it could lead to some seriously rotten outcomes! This vulnerability relates to unknown vectors in the 2D graphics subsystem of Oracle Java, allowing potential unauthorized access and manipulation of application data.

What to do

An attacker exploiting this could compromise the confidentiality, integrity, and availability of your applications. In simpler terms, they could access sensitive information, alter the data, or even crash your system. Imagine your well-organized library being turned upside down with no way to find your favorite book! Although no known exploit exists at this moment, it's wise to stay ahead of the game. Ensure your Java SE is updated to the latest version, monitor security advisories for any new patches, and consider reviewing your applications for additional layers of security. 💡 You've got this! Stay proactive, and you'll keep your systems secure and running smoothly! 🛡️

The record
Technical detail
CVSS v2.0
10.0 · HIGH
Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS v4.0
Not supplied
EPSS
0.07514 · 94.4th percentile
Published
2015-10-22T03:59Z
Affected products (8)
ProductVersionsFixed in
oracle/jdkall versions—
oracle/jdkall versions—
oracle/jdkall versions—
oracle/jdkall versions—
oracle/jreall versions—
oracle/jreall versions—
oracle/jreall versions—
oracle/jreall versions—
References (70)
http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00000.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00001.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00008.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00010.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00001.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00008.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00010.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00019.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00014.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-1919.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-1920.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-1921.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-1926.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-1927.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-1928.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-2506.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-2507.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-2508.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-2509.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-2518.html · af854a3a-2127-422b-91ae-364da2661108http://www.debian.org/security/2015/dsa-3381 · af854a3a-2127-422b-91ae-364da2661108http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html · af854a3a-2127-422b-91ae-364da2661108http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html · af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/77164 · af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id/1033884 · af854a3a-2127-422b-91ae-364da2661108http://www.ubuntu.com/usn/USN-2784-1 · af854a3a-2127-422b-91ae-364da2661108http://www.ubuntu.com/usn/USN-2827-1 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2016:1430 · af854a3a-2127-422b-91ae-364da2661108https://security.gentoo.org/glsa/201603-11 · af854a3a-2127-422b-91ae-364da2661108https://security.gentoo.org/glsa/201603-14 · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00019.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00014.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-1919.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-1920.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-1921.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-1926.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-1927.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-1928.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-2506.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-2507.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-2508.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-2509.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-2518.html · [email protected]http://www.debian.org/security/2015/dsa-3381 · [email protected]http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html · [email protected]http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html · [email protected]http://www.securityfocus.com/bid/77164 · [email protected]http://www.securitytracker.com/id/1033884 · [email protected]http://www.ubuntu.com/usn/USN-2784-1 · [email protected]http://www.ubuntu.com/usn/USN-2827-1 · [email protected]https://access.redhat.com/errata/RHSA-2016:1430 · [email protected]https://security.gentoo.org/glsa/201603-11 · [email protected]https://security.gentoo.org/glsa/201603-14 · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00000.html · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 21 OCT 23:00Z
    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and…
    cvelistv5