CVE-2013-5842: canonical ubuntu_linux

CVSS: 10.0v2.0HighModified

Published 16-10-2013Last modified 06-08-2024

Vulnerability summary

CVE-2013-5842 is a high (CVSS 10.0) vulnerability in canonical ubuntu_linux. EPSS estimates a 17.61% chance of exploitation in the next 30 days, higher than 97.1% of scored vulnerabilities.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

10.0/10

010

High · v2.0 (NVD)

EPSS score

17.61%

0%100%

Medium · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 12 · Related 1

MGASA-2013-0322 MGASA-2013-0323 OPENSUSE-SU-2024:10534-1 RHSA-2013:1440 RHSA-2013:1447 RHSA-2013:1451+6 more

Timeline

16-10-2013
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-5850.

CVSS metrics

1 score · 1 source · 1 version

v2.010.0

EPSS trend

Probability

17.61%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

0.00 pp

From 17.61% on 18-09-2026

18-09-202618-10-2026

EPSS score

17.61%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat5 products

Oracle2 products

jdk1.5.0 | 1.5.0:update1 | 1.5.0:update10 | 1.5.0:update11 | 1.5.0:update12 | 1.5.0:update13 | 1.5.0:update14 | 1.5.0:update15 | 1.5.0:update16 | 1.5.0:update17 | 1.5.0:update18 | 1.5.0:update19 | 1.5.0:update2 | 1.5.0:update20 | 1.5.0:update21 | 1.5.0:update22 | 1.5.0:update23 | 1.5.0:update24 | 1.5.0:update25 | 1.5.0:update26 | 1.5.0:update27 | 1.5.0:update28 | 1.5.0:update29 | 1.5.0:update3 | 1.5.0:update30 | 1.5.0:update31 | 1.5.0:update32 | 1.5.0:update33 | 1.5.0:update34 | 1.5.0:update35 | 1.5.0:update36 | 1.5.0:update38 | 1.5.0:update39 | 1.5.0:update4 | 1.5.0:update40 | 1.5.0:update41 | 1.5.0:update45 | 1.5.0:update5 | 1.5.0:update51 | 1.5.0:update6 | 1.5.0:update7 | 1.5.0:update8 | 1.5.0:update9 | 1.6.0 | 1.6.0:update1 | 1.6.0:update10 | 1.6.0:update11 | 1.6.0:update12 | 1.6.0:update13 | 1.6.0:update14 | 1.6.0:update15 | 1.6.0:update16 | 1.6.0:update17 | 1.6.0:update18 | 1.6.0:update19 | 1.6.0:update2 | 1.6.0:update20 | 1.6.0:update21 | 1.6.0:update22 | 1.6.0:update23 | 1.6.0:update24 | 1.6.0:update25 | 1.6.0:update26 | 1.6.0:update27 | 1.6.0:update29 | 1.6.0:update3 | 1.6.0:update30 | 1.6.0:update31 | 1.6.0:update32 | 1.6.0:update32_b31 | 1.6.0:update32_b32 | 1.6.0:update33 | 1.6.0:update33_b31 | 1.6.0:update33_b32 | 1.6.0:update33_b33 | 1.6.0:update34 | 1.6.0:update34_b31 | 1.6.0:update34_b32 | 1.6.0:update35 | 1.6.0:update35_b31 | 1.6.0:update35_b32 | 1.6.0:update37 | 1.6.0:update37_b31 | 1.6.0:update37_b32 | 1.6.0:update38 | 1.6.0:update38_b31 | 1.6.0:update39 | 1.6.0:update4 | 1.6.0:update41 | 1.6.0:update43 | 1.6.0:update43_b31 | 1.6.0:update45 | 1.6.0:update5 | 1.6.0:update51 | 1.6.0:update51_b31 | 1.6.0:update51_b32 | 1.6.0:update6 | 1.6.0:update60 | 1.6.0:update7 | 1.6.0:update8 | 1.6.0:update9 | 1.7.0 | 1.7.0:update1 | 1.7.0:update10 | 1.7.0:update10_b31 | 1.7.0:update11 | 1.7.0:update11_b32 | 1.7.0:update13 | 1.7.0:update15 | 1.7.0:update17 | 1.7.0:update17_b31 | 1.7.0:update17_b32 | 1.7.0:update2 | 1.7.0:update21 | 1.7.0:update21_b31 | 1.7.0:update25 | 1.7.0:update25_b33 | 1.7.0:update25_b34 | 1.7.0:update25_b35 | 1.7.0:update3 | 1.7.0:update4 | 1.7.0:update40 | 1.7.0:update5 | 1.7.0:update6 | 1.7.0:update7 | 1.7.0:update9
jre1.5.0 | 1.5.0:update1 | 1.5.0:update10 | 1.5.0:update11 | 1.5.0:update12 | 1.5.0:update13 | 1.5.0:update14 | 1.5.0:update15 | 1.5.0:update16 | 1.5.0:update17 | 1.5.0:update18 | 1.5.0:update19 | 1.5.0:update2 | 1.5.0:update20 | 1.5.0:update21 | 1.5.0:update22 | 1.5.0:update23 | 1.5.0:update24 | 1.5.0:update25 | 1.5.0:update26 | 1.5.0:update27 | 1.5.0:update28 | 1.5.0:update29 | 1.5.0:update3 | 1.5.0:update30 | 1.5.0:update31 | 1.5.0:update32 | 1.5.0:update33 | 1.5.0:update34 | 1.5.0:update35 | 1.5.0:update36 | 1.5.0:update38 | 1.5.0:update39 | 1.5.0:update4 | 1.5.0:update40 | 1.5.0:update41 | 1.5.0:update45 | 1.5.0:update5 | 1.5.0:update51 | 1.5.0:update6 | 1.5.0:update7 | 1.5.0:update8 | 1.5.0:update9 | 1.6.0 | 1.6.0:update1 | 1.6.0:update10 | 1.6.0:update11 | 1.6.0:update12 | 1.6.0:update13 | 1.6.0:update14 | 1.6.0:update15 | 1.6.0:update16 | 1.6.0:update17 | 1.6.0:update18 | 1.6.0:update19 | 1.6.0:update2 | 1.6.0:update20 | 1.6.0:update21 | 1.6.0:update22 | 1.6.0:update23 | 1.6.0:update24 | 1.6.0:update25 | 1.6.0:update26 | 1.6.0:update27 | 1.6.0:update29 | 1.6.0:update3 | 1.6.0:update30 | 1.6.0:update31 | 1.6.0:update32 | 1.6.0:update33 | 1.6.0:update34 | 1.6.0:update35 | 1.6.0:update37 | 1.6.0:update38 | 1.6.0:update39 | 1.6.0:update4 | 1.6.0:update41 | 1.6.0:update43 | 1.6.0:update45 | 1.6.0:update5 | 1.6.0:update51 | 1.6.0:update6 | 1.6.0:update60 | 1.6.0:update7 | 1.6.0:update8 | 1.6.0:update9 | 1.7.0 | 1.7.0:update1 | 1.7.0:update10 | 1.7.0:update10_b31 | 1.7.0:update11 | 1.7.0:update11_b32 | 1.7.0:update13 | 1.7.0:update15 | 1.7.0:update17 | 1.7.0:update17_b31 | 1.7.0:update17_b32 | 1.7.0:update2 | 1.7.0:update21 | 1.7.0:update21_b31 | 1.7.0:update25 | 1.7.0:update25_b33 | 1.7.0:update25_b34 | 1.7.0:update25_b35 | 1.7.0:update3 | 1.7.0:update4 | 1.7.0:update40 | 1.7.0:update5 | 1.7.0:update6 | 1.7.0:update7 | 1.7.0:update7_b32 | 1.7.0:update9 | 1.7.0:update9_b31 | 1.7.0:update9_b32

Canonical1 product

ubuntu_linuxEOL10.04 | 12.04 | 12.10 | 13.04 | 13.10

3 vendors · 8 products

References

28 links

access.redhat.com/errata/RHSA-2014:0414Vendor AdvisoryX Refsource REDHATThird Party Advisory
security.gentoo.org/glsa/glsa-201406-32.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
rhn.redhat.com/errata/RHSA-2013-1447.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
rhn.redhat.com/errata/RHSA-2013-1440.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.ubuntu.com/usn/USN-2033-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.zerodayinitiative.com/advisories/ZDI-13-246/X Refsource MISCThird Party AdvisoryVDB Entry
www.ubuntu.com/usn/USN-2089-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
rhn.redhat.com/errata/RHSA-2013-1508.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2013-11/msg00013.htmlVendor AdvisoryX Refsource SUSEBroken Link
bugzilla.redhat.com/show_bug.cgi?id=1019123X Refsource CONFIRMIssue TrackingThird Party Advisory

Show all 28 references

marc.info?l=bugtraq&m=138674073720143&w=2Vendor AdvisoryX Refsource HPIssue TrackingMailing ListThird Party Advisory
rhn.redhat.com/errata/RHSA-2013-1505.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg21655201X Refsource CONFIRMThird Party Advisory
marc.info?l=bugtraq&m=138674031212883&w=2Vendor AdvisoryX Refsource HPIssue TrackingMailing ListThird Party Advisory
lists.opensuse.org/opensuse-updates/2013-11/msg00023.htmlVendor AdvisoryX Refsource SUSEBroken Link
lists.opensuse.org/opensuse-security-announce/2013-11/msg00010.htmlVendor AdvisoryX Refsource SUSEBroken Link
rhn.redhat.com/errata/RHSA-2013-1793.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
rhn.redhat.com/errata/RHSA-2013-1509.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.htmlX Refsource CONFIRMVendor Advisory
lists.apple.com/archives/security-announce/2013/Oct/msg00001.htmlVendor AdvisoryX Refsource APPLEMailing List
rhn.redhat.com/errata/RHSA-2013-1507.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
support.apple.com/kb/HT5982X Refsource CONFIRMThird Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18436VDB EntrySignatureX Refsource OVALBroken Link
www.securityfocus.com/bid/63150VDB EntryX Refsource BIDThird Party Advisory
secunia.com/advisories/56338Third Party AdvisoryX Refsource SECUNIANot Applicable
rhn.redhat.com/errata/RHSA-2013-1451.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS13-025/index.htmlX Refsource CONFIRMThird Party Advisory
osvdb.org/98532VDB EntryX Refsource OSVDBBroken Link

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities