CVE-2014-2402

Name	CVE-2014-2402
Description	Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0432 and CVE-2014-0455.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SuSE, Mageia, GitHub code/issues, web search, more)
References	DSA-2923-1
NVD severity	high (attack range: remote)

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
openjdk-6 (PTS)	wheezy (security), wheezy	6b38-1.13.10-1~deb7u1	fixed
openjdk-7 (PTS)	wheezy	7u95-2.6.4-1~deb7u1	fixed
	wheezy (security)	7u111-2.6.7-1~deb7u1	fixed
	jessie (security), jessie	7u111-2.6.7-1~deb8u1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin
openjdk-6	source	(unstable)	(not affected)
openjdk-7	source	(unstable)	7u55-2.4.7-1	high
openjdk-7	source	wheezy	7u55-2.4.7-1~deb7u1	high	DSA-2923-1

- openjdk-6 <not-affected> (Only affects Java 7/8)