CVE-2013-5817: oracle jdk

CVSS: 10.0v2.0HighModified

AliasesCGA-27j8-mv7j-x44wCGA-2vwq-4q5p-w6cpCGA-4vrx-g6qj-q7xq+29 more

Published 16-10-2013Last modified 06-08-2024

Vulnerability summary

CVE-2013-5817 is a high (CVSS 10.0) vulnerability in oracle jdk. EPSS estimates a 6.30% chance of exploitation in the next 30 days, higher than 93.5% of scored vulnerabilities.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

10.0/10

010

High · v2.0 (NVD)

EPSS score

6.30%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 12 · Related 6

MGASA-2013-0322 MGASA-2013-0323 OPENSUSE-SU-2024:10534-1 RHSA-2013:1440 RHSA-2013:1447 RHSA-2013:1451+11 more

Timeline

16-10-2013
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JNDI.

CVSS metrics

1 score · 1 source · 1 version

v2.010.0

EPSS trend

Probability

6.30%

Chance of exploitation in the next 30 days

Percentile

94%

Versus all other CVEs

30-day change

0.00 pp

From 6.30% on 18-09-2026

18-09-202618-10-2026

EPSS score

6.30%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Chainguard16 products

openjdk-11-openj9-default-policy< 0.53.0-r0
openjdk-17-openj9-default-policy< 0.53.0-r0
openjdk-21-openj9-default-policy< 0.48.0-r2
openjdk-25-openj9< 0.59.0-r1
openjdk-25-openj9-dbg< 0.59.0-r1

Show all 16

Oracle2 products

jdk≤ 1.5.0 | 1.5.0:update36 | 1.5.0:update38 | 1.5.0:update40 | 1.5.0:update41 | 1.5.0:update45 | ≤ 1.7.0 | 1.7.0 | 1.7.0:update1 | 1.7.0:update10 | 1.7.0:update11 | 1.7.0:update13 | 1.7.0:update15 | 1.7.0:update17 | 1.7.0:update2 | 1.7.0:update21 | 1.7.0:update25 | 1.7.0:update3 | 1.7.0:update4 | 1.7.0:update5 | 1.7.0:update6 | 1.7.0:update7 | 1.7.0:update9 | ≤ 1.6.0 | 1.6.0:update22 | 1.6.0:update23 | 1.6.0:update24 | 1.6.0:update25 | 1.6.0:update26 | 1.6.0:update27 | 1.6.0:update29 | 1.6.0:update30 | 1.6.0:update31 | 1.6.0:update32 | 1.6.0:update33 | 1.6.0:update34 | 1.6.0:update35 | 1.6.0:update37 | 1.6.0:update38 | 1.6.0:update39 | 1.6.0:update41 | 1.6.0:update43 | 1.6.0:update45 | 1.6.0:update51
jre≤ 1.6.0 | 1.6.0:update22 | 1.6.0:update23 | 1.6.0:update24 | 1.6.0:update25 | 1.6.0:update26 | 1.6.0:update27 | 1.6.0:update29 | 1.6.0:update30 | 1.6.0:update31 | 1.6.0:update32 | 1.6.0:update33 | 1.6.0:update34 | 1.6.0:update35 | 1.6.0:update37 | 1.6.0:update38 | 1.6.0:update39 | 1.6.0:update41 | 1.6.0:update43 | 1.6.0:update45 | 1.6.0:update51 | ≤ 1.5.0 | 1.5.0:update36 | 1.5.0:update38 | 1.5.0:update40 | 1.5.0:update41 | 1.5.0:update45 | ≤ 1.7.0 | 1.7.0 | 1.7.0:update1 | 1.7.0:update10 | 1.7.0:update11 | 1.7.0:update13 | 1.7.0:update15 | 1.7.0:update17 | 1.7.0:update2 | 1.7.0:update21 | 1.7.0:update25 | 1.7.0:update3 | 1.7.0:update4 | 1.7.0:update5 | 1.7.0:update6 | 1.7.0:update7 | 1.7.0:update9

Sun2 products

jdk1.5.0 | 1.5.0:update1 | 1.5.0:update10 | 1.5.0:update11 | 1.5.0:update11_b03 | 1.5.0:update12 | 1.5.0:update13 | 1.5.0:update14 | 1.5.0:update15 | 1.5.0:update16 | 1.5.0:update17 | 1.5.0:update18 | 1.5.0:update19 | 1.5.0:update2 | 1.5.0:update20 | 1.5.0:update21 | 1.5.0:update22 | 1.5.0:update23 | 1.5.0:update24 | 1.5.0:update25 | 1.5.0:update26 | 1.5.0:update27 | 1.5.0:update28 | 1.5.0:update29 | 1.5.0:update3 | 1.5.0:update31 | 1.5.0:update33 | 1.5.0:update4 | 1.5.0:update5 | 1.5.0:update6 | 1.5.0:update7 | 1.5.0:update7_b03 | 1.5.0:update8 | 1.5.0:update9 | 1.6.0 | 1.6.0:update_10 | 1.6.0:update_11 | 1.6.0:update_12 | 1.6.0:update_13 | 1.6.0:update_14 | 1.6.0:update_15 | 1.6.0:update_16 | 1.6.0:update_17 | 1.6.0:update_18 | 1.6.0:update_19 | 1.6.0:update_20 | 1.6.0:update_21 | 1.6.0:update_3 | 1.6.0:update_4 | 1.6.0:update_5 | 1.6.0:update_6 | 1.6.0:update_7 | 1.6.0:update1 | 1.6.0:update1_b06 | 1.6.0:update2
jre1.6.0 | 1.6.0:update_1 | 1.6.0:update_10 | 1.6.0:update_11 | 1.6.0:update_12 | 1.6.0:update_13 | 1.6.0:update_14 | 1.6.0:update_15 | 1.6.0:update_16 | 1.6.0:update_17 | 1.6.0:update_18 | 1.6.0:update_19 | 1.6.0:update_2 | 1.6.0:update_20 | 1.6.0:update_21 | 1.6.0:update_3 | 1.6.0:update_4 | 1.6.0:update_5 | 1.6.0:update_6 | 1.6.0:update_7 | 1.6.0:update_9 | 1.5.0 | 1.5.0:update1 | 1.5.0:update10 | 1.5.0:update11 | 1.5.0:update12 | 1.5.0:update13 | 1.5.0:update14 | 1.5.0:update15 | 1.5.0:update16 | 1.5.0:update17 | 1.5.0:update18 | 1.5.0:update19 | 1.5.0:update2 | 1.5.0:update20 | 1.5.0:update21 | 1.5.0:update22 | 1.5.0:update23 | 1.5.0:update24 | 1.5.0:update25 | 1.5.0:update26 | 1.5.0:update27 | 1.5.0:update28 | 1.5.0:update29 | 1.5.0:update3 | 1.5.0:update31 | 1.5.0:update33 | 1.5.0:update4 | 1.5.0:update5 | 1.5.0:update6 | 1.5.0:update7 | 1.5.0:update8 | 1.5.0:update9

3 vendors · 20 products

References

26 links

access.redhat.com/errata/RHSA-2014:0414Vendor AdvisoryX Refsource REDHAT
security.gentoo.org/glsa/glsa-201406-32.xmlVendor AdvisoryX Refsource GENTOO
rhn.redhat.com/errata/RHSA-2013-1447.htmlVendor AdvisoryX Refsource REDHAT
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19024VDB EntrySignatureX Refsource OVAL
rhn.redhat.com/errata/RHSA-2013-1440.htmlVendor AdvisoryX Refsource REDHAT
www.ubuntu.com/usn/USN-2033-1Vendor AdvisoryX Refsource UBUNTU
www.ubuntu.com/usn/USN-2089-1Vendor AdvisoryX Refsource UBUNTU
rhn.redhat.com/errata/RHSA-2013-1508.htmlVendor AdvisoryX Refsource REDHAT
lists.opensuse.org/opensuse-security-announce/2013-11/msg00013.htmlVendor AdvisoryX Refsource SUSE
marc.info?l=bugtraq&m=138674073720143&w=2Vendor AdvisoryX Refsource HP

Show all 26 references

rhn.redhat.com/errata/RHSA-2013-1505.htmlVendor AdvisoryX Refsource REDHAT
www-01.ibm.com/support/docview.wss?uid=swg21655201X Refsource CONFIRM
marc.info?l=bugtraq&m=138674031212883&w=2Vendor AdvisoryX Refsource HP
lists.opensuse.org/opensuse-updates/2013-11/msg00023.htmlVendor AdvisoryX Refsource SUSE
lists.opensuse.org/opensuse-security-announce/2013-11/msg00010.htmlVendor AdvisoryX Refsource SUSE
rhn.redhat.com/errata/RHSA-2013-1793.htmlVendor AdvisoryX Refsource REDHAT
rhn.redhat.com/errata/RHSA-2013-1509.htmlVendor AdvisoryX Refsource REDHAT
www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.htmlX Refsource CONFIRMVendor Advisory
lists.apple.com/archives/security-announce/2013/Oct/msg00001.htmlVendor AdvisoryX Refsource APPLE
rhn.redhat.com/errata/RHSA-2013-1507.htmlVendor AdvisoryX Refsource REDHAT
support.apple.com/kb/HT5982X Refsource CONFIRM
secunia.com/advisories/56338Third Party AdvisoryX Refsource SECUNIA
rhn.redhat.com/errata/RHSA-2013-1451.htmlVendor AdvisoryX Refsource REDHAT
www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS13-025/index.htmlX Refsource CONFIRM
www.securityfocus.com/bid/63146VDB EntryX Refsource BID
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1019118X Refsource CONFIRM

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities