Business information leak In java-1.7.0-openjdk
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Networking. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to obtain a socket's local address via vectors involving inconsistencies between Socket.getLocalAddress and InetAddress.getLocalHost.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 rpm rhel6 | 1:1.7.0.25-2.3.10.3.el6_4 | ||
rpm rhel5 | 1:1.6.0.0-1.41.1.11.11.90.el5_9 | ||
rpm rhel6 | 1:1.6.0.0-1.62.1.11.11.90.el6_4 | ||
rpm rhel5 | 1:1.7.0.25-2.3.10.4.el5_9 |
Aliases