Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2014-0416 Details

Description

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect integrity via vectors related to JAAS. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to how principals are set for the Subject class, which allows attackers to escape the sandbox using deserialization of a crafted Subject instance.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/abe1cb2d27cb	CVE
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html	CVE
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html	CVE
http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html	CVE
http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html	CVE
http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html	CVE
http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html	CVE
http://marc.info/?l=bugtraq&m=139402697611681&w=2	CVE
http://marc.info/?l=bugtraq&m=139402749111889&w=2	CVE
http://osvdb.org/102017	CVE
http://rhn.redhat.com/errata/RHSA-2014-0026.html	CVE
http://rhn.redhat.com/errata/RHSA-2014-0027.html	CVE
http://rhn.redhat.com/errata/RHSA-2014-0030.html	CVE
http://rhn.redhat.com/errata/RHSA-2014-0097.html	CVE
http://rhn.redhat.com/errata/RHSA-2014-0134.html	CVE
http://rhn.redhat.com/errata/RHSA-2014-0135.html	CVE
http://rhn.redhat.com/errata/RHSA-2014-0136.html	CVE
https://access.redhat.com/errata/RHSA-2014:0414	CVE
https://bugzilla.redhat.com/show_bug.cgi?id=1051912	CVE
http://secunia.com/advisories/56432	CVE
http://secunia.com/advisories/56485	CVE
http://secunia.com/advisories/56486	CVE
http://secunia.com/advisories/56535	CVE
http://secunia.com/advisories/59235	CVE
http://secunia.com/advisories/59283	CVE
http://secunia.com/advisories/59307	CVE
http://secunia.com/advisories/59339	CVE
http://secunia.com/advisories/60568	CVE
https://exchange.xforce.ibmcloud.com/vulnerabilities/90349	CVE
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777	CVE
http://www-01.ibm.com/support/docview.wss?uid=swg21676978	CVE
http://www-01.ibm.com/support/docview.wss?uid=swg21677294	CVE
http://www-01.ibm.com/support/docview.wss?uid=swg21677388	CVE
http://www-01.ibm.com/support/docview.wss?uid=swg21679287	CVE
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html	CVE	Vendor Advisory
http://www.securityfocus.com/bid/64758	CVE
http://www.securityfocus.com/bid/64937	CVE
http://www.securitytracker.com/id/1029608	CVE
http://www.ubuntu.com/usn/USN-2089-1	CVE
http://www.ubuntu.com/usn/USN-2124-1	CVE
http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/abe1cb2d27cb	[email protected]
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html	[email protected]
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html	[email protected]
http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html	[email protected]
http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html	[email protected]
http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html	[email protected]
http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html	[email protected]
http://marc.info/?l=bugtraq&m=139402697611681&w=2	[email protected]
http://marc.info/?l=bugtraq&m=139402749111889&w=2	[email protected]
http://osvdb.org/102017	[email protected]
http://rhn.redhat.com/errata/RHSA-2014-0026.html	[email protected]
http://rhn.redhat.com/errata/RHSA-2014-0027.html	[email protected]
http://rhn.redhat.com/errata/RHSA-2014-0030.html	[email protected]
http://rhn.redhat.com/errata/RHSA-2014-0097.html	[email protected]
http://rhn.redhat.com/errata/RHSA-2014-0134.html	[email protected]
http://rhn.redhat.com/errata/RHSA-2014-0135.html	[email protected]
http://rhn.redhat.com/errata/RHSA-2014-0136.html	[email protected]
https://access.redhat.com/errata/RHSA-2014:0414	[email protected]
https://bugzilla.redhat.com/show_bug.cgi?id=1051912	[email protected]
http://secunia.com/advisories/56432	[email protected]
http://secunia.com/advisories/56485	[email protected]
http://secunia.com/advisories/56486	[email protected]
http://secunia.com/advisories/56535	[email protected]
http://secunia.com/advisories/59235	[email protected]
http://secunia.com/advisories/59283	[email protected]
http://secunia.com/advisories/59307	[email protected]
http://secunia.com/advisories/59339	[email protected]
http://secunia.com/advisories/60568	[email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/90349	[email protected]
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777	[email protected]
http://www-01.ibm.com/support/docview.wss?uid=swg21676978	[email protected]
http://www-01.ibm.com/support/docview.wss?uid=swg21677294	[email protected]
http://www-01.ibm.com/support/docview.wss?uid=swg21677388	[email protected]
http://www-01.ibm.com/support/docview.wss?uid=swg21679287	[email protected]
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html	[email protected]	Vendor Advisory
http://www.securityfocus.com/bid/64758	[email protected]
http://www.securityfocus.com/bid/64937	[email protected]
http://www.securitytracker.com/id/1029608	[email protected]
http://www.ubuntu.com/usn/USN-2089-1	[email protected]
http://www.ubuntu.com/usn/USN-2124-1	[email protected]

see all 80 references

Weakness Enumeration

CWE-ID	CWE Name	Source
NVD-CWE-noinfo	Insufficient Information to Classify Weakness	[email protected]

Affected Products

Product	Versions
oracle jdk	1.6.0 update65 1.5.0 update55
CPE cpe:2.3:a:oracle:jdk:1.6.0:update65:::::: cpe:2.3:a:oracle:jdk:1.5.0:update55:::::: Remediation No remediation found in references.
oracle jre	1.6.0 update65 1.7.0 update45 1.5.0 update55
CPE cpe:2.3:a:oracle:jre:1.6.0:update65:::::: cpe:2.3:a:oracle:jre:1.7.0:update45:::::: cpe:2.3:a:oracle:jre:1.5.0:update55:::::: Remediation No remediation found in references.

Change History

15 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Apr 29, 2026	Status Change	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
May 13, 2022	CPE Deprecation Remap	[email protected]
May 13, 2022	CPE Deprecation Remap	[email protected]
May 13, 2022	CPE Deprecation Remap	[email protected]
May 13, 2022	CPE Deprecation Remap	[email protected]
May 13, 2022	CPE Deprecation Remap	[email protected]
Sep 8, 2020	CPE Deprecation Remap	[email protected]
Jan 5, 2018	CVE Modified	[email protected]
Aug 29, 2017	CVE Modified	[email protected]
Jan 7, 2017	CVE Modified	[email protected]
Sep 27, 2016	CVE Modified	[email protected]
Jan 16, 2014	Initial Analysis	[email protected]