Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2014-0411 Details

Description

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that this issue allows remote attackers to obtain sensitive information about encryption keys via a timing discrepancy during the TLS/SSL handshake.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/d533e96c7acc	CVE
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html	CVE
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html	CVE
http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html	CVE
http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html	CVE
http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html	CVE
http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html	CVE
http://marc.info/?l=bugtraq&m=139402697611681&w=2	CVE
http://marc.info/?l=bugtraq&m=139402749111889&w=2	CVE
http://osvdb.org/102028	CVE
http://rhn.redhat.com/errata/RHSA-2014-0026.html	CVE
http://rhn.redhat.com/errata/RHSA-2014-0027.html	CVE
http://rhn.redhat.com/errata/RHSA-2014-0030.html	CVE
http://rhn.redhat.com/errata/RHSA-2014-0097.html	CVE
http://rhn.redhat.com/errata/RHSA-2014-0134.html	CVE
http://rhn.redhat.com/errata/RHSA-2014-0135.html	CVE
http://rhn.redhat.com/errata/RHSA-2014-0136.html	CVE
https://access.redhat.com/errata/RHSA-2014:0414	CVE
https://bugzilla.redhat.com/show_bug.cgi?id=1053010	CVE
http://secunia.com/advisories/56432	CVE
http://secunia.com/advisories/56485	CVE
http://secunia.com/advisories/56486	CVE
http://secunia.com/advisories/56487	CVE
http://secunia.com/advisories/56535	CVE
http://secunia.com/advisories/57809	CVE
http://secunia.com/advisories/59037	CVE
http://secunia.com/advisories/59071	CVE
http://secunia.com/advisories/59082	CVE
http://secunia.com/advisories/59194	CVE
http://secunia.com/advisories/59235	CVE
http://secunia.com/advisories/59251	CVE
http://secunia.com/advisories/59254	CVE
http://secunia.com/advisories/59283	CVE
http://secunia.com/advisories/59324	CVE
http://secunia.com/advisories/59339	CVE
http://secunia.com/advisories/59665	CVE
http://secunia.com/advisories/59704	CVE
http://secunia.com/advisories/59705	CVE
http://secunia.com/advisories/59872	CVE
http://secunia.com/advisories/60005	CVE
http://secunia.com/advisories/60498	CVE
http://secunia.com/advisories/60833	CVE
http://secunia.com/advisories/60835	CVE
http://secunia.com/advisories/60836	CVE
https://exchange.xforce.ibmcloud.com/vulnerabilities/90357	CVE
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777	CVE
https://www.ibm.com/support/docview.wss?uid=swg21675223	CVE
https://www.ibm.com/support/docview.wss?uid=swg21677913	CVE
http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004656	CVE
http://www-01.ibm.com/support/docview.wss?uid=swg21669519	CVE
http://www-01.ibm.com/support/docview.wss?uid=swg21675938	CVE
http://www-01.ibm.com/support/docview.wss?uid=swg21676190	CVE
http://www-01.ibm.com/support/docview.wss?uid=swg21676373	CVE
http://www-01.ibm.com/support/docview.wss?uid=swg21676978	CVE
http://www-01.ibm.com/support/docview.wss?uid=swg21677388	CVE
http://www-01.ibm.com/support/docview.wss?uid=swg21680234	CVE
http://www-01.ibm.com/support/docview.wss?uid=swg21680387	CVE
http://www-01.ibm.com/support/docview.wss?uid=swg21682668	CVE
http://www-01.ibm.com/support/docview.wss?uid=swg21682669	CVE
http://www-01.ibm.com/support/docview.wss?uid=swg21682670	CVE
http://www-01.ibm.com/support/docview.wss?uid=swg21682671	CVE
http://www-01.ibm.com/support/docview.wss?uid=swg21682904	CVE
http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096132	CVE
http://www.ibm.com/support/docview.wss?uid=ssg1S1004745	CVE
http://www.ibm.com/support/docview.wss?uid=swg21672078	CVE
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html	CVE	Vendor Advisory
http://www.securityfocus.com/bid/64758	CVE
http://www.securityfocus.com/bid/64918	CVE
http://www.securitytracker.com/id/1029608	CVE
http://www.ubuntu.com/usn/USN-2089-1	CVE
http://www.ubuntu.com/usn/USN-2124-1	CVE
http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/d533e96c7acc	[email protected]
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html	[email protected]
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html	[email protected]
http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html	[email protected]
http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html	[email protected]
http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html	[email protected]
http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html	[email protected]
http://marc.info/?l=bugtraq&m=139402697611681&w=2	[email protected]
http://marc.info/?l=bugtraq&m=139402749111889&w=2	[email protected]
http://osvdb.org/102028	[email protected]
http://rhn.redhat.com/errata/RHSA-2014-0026.html	[email protected]
http://rhn.redhat.com/errata/RHSA-2014-0027.html	[email protected]
http://rhn.redhat.com/errata/RHSA-2014-0030.html	[email protected]
http://rhn.redhat.com/errata/RHSA-2014-0097.html	[email protected]
http://rhn.redhat.com/errata/RHSA-2014-0134.html	[email protected]
http://rhn.redhat.com/errata/RHSA-2014-0135.html	[email protected]
http://rhn.redhat.com/errata/RHSA-2014-0136.html	[email protected]
https://access.redhat.com/errata/RHSA-2014:0414	[email protected]
https://bugzilla.redhat.com/show_bug.cgi?id=1053010	[email protected]
http://secunia.com/advisories/56432	[email protected]
http://secunia.com/advisories/56485	[email protected]
http://secunia.com/advisories/56486	[email protected]
http://secunia.com/advisories/56487	[email protected]
http://secunia.com/advisories/56535	[email protected]
http://secunia.com/advisories/57809	[email protected]
http://secunia.com/advisories/59037	[email protected]
http://secunia.com/advisories/59071	[email protected]
http://secunia.com/advisories/59082	[email protected]
http://secunia.com/advisories/59194	[email protected]
http://secunia.com/advisories/59235	[email protected]
http://secunia.com/advisories/59251	[email protected]
http://secunia.com/advisories/59254	[email protected]
http://secunia.com/advisories/59283	[email protected]
http://secunia.com/advisories/59324	[email protected]
http://secunia.com/advisories/59339	[email protected]
http://secunia.com/advisories/59665	[email protected]
http://secunia.com/advisories/59704	[email protected]
http://secunia.com/advisories/59705	[email protected]
http://secunia.com/advisories/59872	[email protected]
http://secunia.com/advisories/60005	[email protected]
http://secunia.com/advisories/60498	[email protected]
http://secunia.com/advisories/60833	[email protected]
http://secunia.com/advisories/60835	[email protected]
http://secunia.com/advisories/60836	[email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/90357	[email protected]
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777	[email protected]
https://www.ibm.com/support/docview.wss?uid=swg21675223	[email protected]
https://www.ibm.com/support/docview.wss?uid=swg21677913	[email protected]
http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004656	[email protected]
http://www-01.ibm.com/support/docview.wss?uid=swg21669519	[email protected]
http://www-01.ibm.com/support/docview.wss?uid=swg21675938	[email protected]
http://www-01.ibm.com/support/docview.wss?uid=swg21676190	[email protected]
http://www-01.ibm.com/support/docview.wss?uid=swg21676373	[email protected]
http://www-01.ibm.com/support/docview.wss?uid=swg21676978	[email protected]
http://www-01.ibm.com/support/docview.wss?uid=swg21677388	[email protected]
http://www-01.ibm.com/support/docview.wss?uid=swg21680234	[email protected]
http://www-01.ibm.com/support/docview.wss?uid=swg21680387	[email protected]
http://www-01.ibm.com/support/docview.wss?uid=swg21682668	[email protected]
http://www-01.ibm.com/support/docview.wss?uid=swg21682669	[email protected]
http://www-01.ibm.com/support/docview.wss?uid=swg21682670	[email protected]
http://www-01.ibm.com/support/docview.wss?uid=swg21682671	[email protected]
http://www-01.ibm.com/support/docview.wss?uid=swg21682904	[email protected]
http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096132	[email protected]
http://www.ibm.com/support/docview.wss?uid=ssg1S1004745	[email protected]
http://www.ibm.com/support/docview.wss?uid=swg21672078	[email protected]
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html	[email protected]	Vendor Advisory
http://www.securityfocus.com/bid/64758	[email protected]
http://www.securityfocus.com/bid/64918	[email protected]
http://www.securitytracker.com/id/1029608	[email protected]
http://www.ubuntu.com/usn/USN-2089-1	[email protected]
http://www.ubuntu.com/usn/USN-2124-1	[email protected]

see all 142 references

Weakness Enumeration

CWE-ID	CWE Name	Source
NVD-CWE-noinfo	Insufficient Information to Classify Weakness	[email protected]

Affected Products

Product	Versions
oracle jrockit	r27.7.7 r28.2.9
CPE cpe:2.3:a:oracle:jrockit:r27.7.7:::::::* cpe:2.3:a:oracle:jrockit:r28.2.9:::::::* Remediation No remediation found in references.
oracle jre	1.7.0 update45 1.5.0 update55 1.6.0 update65
CPE cpe:2.3:a:oracle:jre:1.7.0:update45:::::: cpe:2.3:a:oracle:jre:1.5.0:update55:::::: cpe:2.3:a:oracle:jre:1.6.0:update65:::::: Remediation No remediation found in references.
oracle jdk	1.5.0 update55 1.6.0 update65
CPE cpe:2.3:a:oracle:jdk:1.5.0:update55:::::: cpe:2.3:a:oracle:jdk:1.6.0:update65:::::: Remediation No remediation found in references.

Change History

16 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Apr 29, 2026	Status Change	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
May 13, 2022	CPE Deprecation Remap	[email protected]
May 13, 2022	CPE Deprecation Remap	[email protected]
May 13, 2022	CPE Deprecation Remap	[email protected]
May 13, 2022	CPE Deprecation Remap	[email protected]
May 13, 2022	CPE Deprecation Remap	[email protected]
Sep 8, 2020	CPE Deprecation Remap	[email protected]
Jan 5, 2018	CVE Modified	[email protected]
Aug 29, 2017	CVE Modified	[email protected]
Jan 7, 2017	CVE Modified	[email protected]
Sep 27, 2016	CVE Modified	[email protected]
Nov 5, 2015	Modified Analysis	[email protected]
Jan 16, 2014	Initial Analysis	[email protected]

CVE-2014-0411 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

Change History

QUICK INFO