CVE-2014-0460: canonical ubuntu_linux

CVSS: 5.8v2.0MediumModified

AliasesUBUNTU-CVE-2014-0460

Published 16-04-2014Last modified 06-08-2024

Vulnerability summary

CVE-2014-0460 is a medium (CVSS 5.8) vulnerability in canonical ubuntu_linux. EPSS estimates a 4.33% chance of exploitation in the next 30 days, higher than 91% of scored vulnerabilities.

Overall risk

24/100

0100

Low · default modelHow is this calculated?

CVSS score

5.8/10

010

Medium · v2.0 (NVD)

EPSS score

4.33%

0%100%

Low · -0.02 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 18 · Related 2

DSA-2912-1 DSA-2923-1 MGASA-2014-0189 OPENSUSE-SU-2024:10534-1 RHSA-2014:0406 RHSA-2014:0407+12 more

Timeline

16-04-2014
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via vectors related to JNDI.

CVSS metrics

1 score · 1 source · 1 version

v2.05.8

EPSS trend

Probability

4.33%

Chance of exploitation in the next 30 days

Percentile

91%

Versus all other CVEs

30-day change

-0.02 pp

From 4.35% on 19-09-2026

19-09-202619-10-2026

EPSS score

4.33%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Oracle3 products

jdk1.5.0:update61 | 1.6.0:update71 | 1.7.0:update51 | 1.8.0
jre1.5.0:update61 | 1.6.0:update71 | 1.7.0:update51 | 1.8.0
jrockitr27.8.1 | r28.3.1

Canonical1 product

ubuntu_linuxEOL10.04 | 12.04 | 12.10 | 13.10 | 14.04

Debian1 product

debian_linuxEOL6.0 | 7.0 | 8.0

Juniper1 product

junos_space< 15.1

Ubuntu1 product

openjdk-7< 7u55-2.4.7-1ubuntu1

5 vendors · 7 products

References

52 links

secunia.com/advisories/59642Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/59022Third Party AdvisoryX Refsource SECUNIA
www.ubuntu.com/usn/USN-2187-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
rhn.redhat.com/errata/RHSA-2014-0675.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
access.redhat.com/errata/RHSA-2014:0414Vendor AdvisoryX Refsource REDHATThird Party Advisory
security.gentoo.org/glsa/glsa-201406-32.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
secunia.com/advisories/59705Third Party AdvisoryX Refsource SECUNIA
www.ubuntu.com/usn/USN-2191-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg21676672X Refsource CONFIRMThird Party Advisory
kb.juniper.net/InfoCenter/index?page=content&id=JSA10698X Refsource CONFIRMThird Party Advisory

Show all 52 references

marc.info?l=bugtraq&m=140852886808946&w=2Vendor AdvisoryX Refsource HPIssue TrackingMailing ListThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg21672080X Refsource CONFIRMThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg21676315X Refsource CONFIRMBroken Link
access.redhat.com/errata/RHSA-2014:0413Vendor AdvisoryX Refsource REDHATThird Party Advisory
secunia.com/advisories/59058Third Party AdvisoryX Refsource SECUNIA
marc.info?l=bugtraq&m=140852974709252&w=2Vendor AdvisoryX Refsource HPIssue TrackingMailing ListThird Party Advisory
secunia.com/advisories/61264Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/59706Third Party AdvisoryX Refsource SECUNIA
rhn.redhat.com/errata/RHSA-2014-0685.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg21677294X Refsource CONFIRMBroken Link
secunia.com/advisories/59436Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/59071Third Party AdvisoryX Refsource SECUNIA
www.debian.org/security/2014/dsa-2912Vendor AdvisoryX Refsource DEBIANThird Party Advisory
www.securityfocus.com/bid/66916VDB EntryX Refsource BIDThird Party Advisory
secunia.com/advisories/60117Third Party AdvisoryX Refsource SECUNIA
www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.htmlX Refsource CONFIRMVendor AdvisoryREPORT
www-01.ibm.com/support/docview.wss?uid=swg21681256X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/58415Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/59516Third Party AdvisoryX Refsource SECUNIA
www-01.ibm.com/support/docview.wss?uid=swg21674539X Refsource CONFIRMThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg21686717X Refsource CONFIRMThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg21683484X Refsource CONFIRMBroken Link
www-01.ibm.com/support/docview.wss?uid=swg21673836X Refsource CONFIRMThird Party Advisory
www.ibm.com/support/docview.wss?uid=swg21677387X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/59023Third Party AdvisoryX Refsource SECUNIA
www-01.ibm.com/support/docview.wss?uid=swg21676746X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/59307Third Party AdvisoryX Refsource SECUNIA
www-01.ibm.com/support/docview.wss?uid=swg21679713X Refsource CONFIRMThird Party Advisory
www.ibm.com/support/docview.wss?uid=swg21675343X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/59082Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/59250Third Party AdvisoryX Refsource SECUNIA
security.gentoo.org/glsa/glsa-201502-12.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
secunia.com/advisories/59255Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/59704Third Party AdvisoryX Refsource SECUNIA
www-01.ibm.com/support/docview.wss?uid=swg21681018X Refsource CONFIRMBroken Link
secunia.com/advisories/60111Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/60003Third Party AdvisoryX Refsource SECUNIA
www.ibm.com/support/docview.wss?uid=swg21675588X Refsource CONFIRMBroken Link
ubuntu.com/security/CVE-2014-0460REPORT
ubuntu.com/security/notices/USN-2187-1Advisory
ubuntu.com/security/notices/USN-2191-1Advisory
www.cve.org/CVERecord?id=CVE-2014-0460REPORT

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities