CVE-2013-0427: oracle jdk

Modified

Published 02-02-2013Last modified 06-08-2024

Vulnerability summary

CVE-2013-0427 is a medium (CVSS 5.0) vulnerability in oracle jdk. EPSS estimates a 4.88% chance of exploitation in the next 30 days, higher than 92% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 5, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

5.0/10

010

Medium · v2.0 (NVD)

EPSS score

4.88%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 11 · Related 1

OPENSUSE-SU-2024:10534-1 RHSA-2013:0236 RHSA-2013:0237 RHSA-2013:0245 RHSA-2013:0246 RHSA-2013:0247+5 more

Timeline

02-02-2013
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect integrity via unknown vectors related to Libraries. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to interrupt certain threads that should not be interrupted.

CVSS metrics

1 score · 1 source · 1 version

v2.05.0

EPSS trend

Probability

4.88%

Chance of exploitation in the next 30 days

Percentile

92%

Versus all other CVEs

30-day change

No change 0.00 pp

From 4.88% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Version check

Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.

Oracle2 products

jdk1.7.0 | 1.7.0:update1 | 1.7.0:update10 | 1.7.0:update11 | 1.7.0:update2 | 1.7.0:update3 | 1.7.0:update4 | 1.7.0:update5 | 1.7.0:update6 | 1.7.0:update7 | 1.7.0:update9 | 1.6.0:update22 | 1.6.0:update23 | 1.6.0:update24 | 1.6.0:update25 | 1.6.0:update26 | 1.6.0:update27 | 1.6.0:update29 | 1.6.0:update30 | 1.6.0:update31 | 1.6.0:update32 | 1.6.0:update33 | 1.6.0:update34 | 1.6.0:update35 | 1.6.0:update37 | 1.6.0:update38 | 1.5.0:update36 | 1.5.0:update38
jre1.7.0 | 1.7.0:update1 | 1.7.0:update10 | 1.7.0:update11 | 1.7.0:update2 | 1.7.0:update3 | 1.7.0:update4 | 1.7.0:update5 | 1.7.0:update6 | 1.7.0:update7 | 1.7.0:update9 | 1.6.0:update22 | 1.6.0:update23 | 1.6.0:update24 | 1.6.0:update25 | 1.6.0:update26 | 1.6.0:update27 | 1.6.0:update29 | 1.6.0:update30 | 1.6.0:update31 | 1.6.0:update32 | 1.6.0:update33 | 1.6.0:update34 | 1.6.0:update35 | 1.6.0:update37 | 1.6.0:update38 | 1.5.0:update36 | 1.5.0:update38

Sun2 products

jdk1.6.0 | 1.6.0:update_10 | 1.6.0:update_11 | 1.6.0:update_12 | 1.6.0:update_13 | 1.6.0:update_14 | 1.6.0:update_15 | 1.6.0:update_16 | 1.6.0:update_17 | 1.6.0:update_18 | 1.6.0:update_19 | 1.6.0:update_20 | 1.6.0:update_21 | 1.6.0:update_3 | 1.6.0:update_4 | 1.6.0:update_5 | 1.6.0:update_6 | 1.6.0:update_7 | 1.6.0:update1 | 1.6.0:update1_b06 | 1.6.0:update2 | 1.5.0 | 1.5.0:update1 | 1.5.0:update10 | 1.5.0:update11 | 1.5.0:update11_b03 | 1.5.0:update12 | 1.5.0:update13 | 1.5.0:update14 | 1.5.0:update15 | 1.5.0:update16 | 1.5.0:update17 | 1.5.0:update18 | 1.5.0:update19 | 1.5.0:update2 | 1.5.0:update20 | 1.5.0:update21 | 1.5.0:update22 | 1.5.0:update23 | 1.5.0:update24 | 1.5.0:update25 | 1.5.0:update26 | 1.5.0:update27 | 1.5.0:update28 | 1.5.0:update29 | 1.5.0:update3 | 1.5.0:update31 | 1.5.0:update33 | 1.5.0:update4 | 1.5.0:update5 | 1.5.0:update6 | 1.5.0:update7 | 1.5.0:update7_b03 | 1.5.0:update8 | 1.5.0:update9
jre1.6.0 | 1.6.0:update_1 | 1.6.0:update_10 | 1.6.0:update_11 | 1.6.0:update_12 | 1.6.0:update_13 | 1.6.0:update_14 | 1.6.0:update_15 | 1.6.0:update_16 | 1.6.0:update_17 | 1.6.0:update_18 | 1.6.0:update_19 | 1.6.0:update_2 | 1.6.0:update_20 | 1.6.0:update_21 | 1.6.0:update_3 | 1.6.0:update_4 | 1.6.0:update_5 | 1.6.0:update_6 | 1.6.0:update_7 | 1.6.0:update_9 | 1.5.0 | 1.5.0:update1 | 1.5.0:update10 | 1.5.0:update11 | 1.5.0:update12 | 1.5.0:update13 | 1.5.0:update14 | 1.5.0:update15 | 1.5.0:update16 | 1.5.0:update17 | 1.5.0:update18 | 1.5.0:update19 | 1.5.0:update2 | 1.5.0:update20 | 1.5.0:update21 | 1.5.0:update22 | 1.5.0:update23 | 1.5.0:update24 | 1.5.0:update25 | 1.5.0:update26 | 1.5.0:update27 | 1.5.0:update28 | 1.5.0:update29 | 1.5.0:update3 | 1.5.0:update31 | 1.5.0:update33 | 1.5.0:update4 | 1.5.0:update5 | 1.5.0:update6 | 1.5.0:update7 | 1.5.0:update8 | 1.5.0:update9

2 vendors · 4 products

References

26 links

bugzilla.redhat.com/bugzilla/show_bug.cgi?id=907455X Refsource CONFIRM
security.gentoo.org/glsa/glsa-201406-32.xmlVendor AdvisoryX Refsource GENTOO
www.mandriva.com/security/advisories?name=MDVSA-2013:095Vendor AdvisoryX Refsource MANDRIVA
www.securityfocus.com/bid/57724VDB EntryX Refsource BID
marc.info?l=bugtraq&m=136570436423916&w=2Vendor AdvisoryX Refsource HP
www.us-cert.gov/cas/techalerts/TA13-032A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16013VDB EntrySignatureX Refsource OVAL
rhn.redhat.com/errata/RHSA-2013-0236.htmlVendor AdvisoryX Refsource REDHAT
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19245VDB EntrySignatureX Refsource OVAL
rhn.redhat.com/errata/RHSA-2013-1455.htmlVendor AdvisoryX Refsource REDHAT

Show all 26 references

www.kb.cert.org/vuls/id/858729Third Party AdvisoryX Refsource CERT VNUS Government Resource
rhn.redhat.com/errata/RHSA-2013-0237.htmlVendor AdvisoryX Refsource REDHAT
marc.info?l=bugtraq&m=136439120408139&w=2Vendor AdvisoryX Refsource HP
rhn.redhat.com/errata/RHSA-2013-0247.htmlVendor AdvisoryX Refsource REDHAT
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19488VDB EntrySignatureX Refsource OVAL
marc.info?l=bugtraq&m=136733161405818&w=2Vendor AdvisoryX Refsource HP
lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.htmlVendor AdvisoryX Refsource SUSE
lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.htmlVendor AdvisoryX Refsource SUSE
rhn.redhat.com/errata/RHSA-2013-0246.htmlVendor AdvisoryX Refsource REDHAT
rhn.redhat.com/errata/RHSA-2013-1456.htmlVendor AdvisoryX Refsource REDHAT
rhn.redhat.com/errata/RHSA-2013-0245.htmlVendor AdvisoryX Refsource REDHAT
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18641VDB EntrySignatureX Refsource OVAL
www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.htmlX Refsource CONFIRMVendor Advisory
icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWSX Refsource CONFIRM
icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/87d135824bdfX Refsource CONFIRM
wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056X Refsource CONFIRM