CVE-2015-4871 Affecting java-1.7.0-openjdk-accessibility package, versions <1:1.7.0.95-2.6.4.0.el7_2
Threat Intelligence
EPSS
0.59% (79th
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-RHEL7-JAVA170OPENJDKACCESSIBILITY-5088899
- published 26 Jul 2021
- disclosed 20 Oct 2015
Introduced: 20 Oct 2015
CVE-2015-4871 Open this link in a new tabHow to fix?
Upgrade RHEL:7 java-1.7.0-openjdk-accessibility to version 1:1.7.0.95-2.6.4.0.el7_2 or higher.
This issue was patched in RHSA-2016:0054.
NVD Description
Note: Versions mentioned in the description apply only to the upstream java-1.7.0-openjdk-accessibility package and not the java-1.7.0-openjdk-accessibility package as distributed by RHEL.
See How to fix? for RHEL:7 relevant fixed versions and status.
Unspecified vulnerability in Oracle Java SE 7u85 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.
References
- http://www.securityfocus.com/bid/77238
- http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- https://access.redhat.com/security/cve/CVE-2015-4871
- http://www.debian.org/security/2015/dsa-3381
- http://www.debian.org/security/2015/dsa-3401
- https://security.gentoo.org/glsa/201603-11
- https://security.gentoo.org/glsa/201603-14
- http://rhn.redhat.com/errata/RHSA-2015-1927.html
- http://rhn.redhat.com/errata/RHSA-2015-2506.html
- http://rhn.redhat.com/errata/RHSA-2015-2507.html
- http://rhn.redhat.com/errata/RHSA-2015-2509.html
- http://rhn.redhat.com/errata/RHSA-2016-0053.html
- http://rhn.redhat.com/errata/RHSA-2016-0054.html
- https://access.redhat.com/errata/RHSA-2016:0054
- http://www.securitytracker.com/id/1033884
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00042.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00043.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00044.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00047.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00048.html
- http://www.ubuntu.com/usn/USN-2818-1
CVSS Scores
version 3.1