CVE-2013-2453

Priority
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component
in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier
allows remote attackers to affect integrity via vectors related to JMX.
NOTE: the previous information is from the June 2013 CPU. Oracle has not
commented on claims from another vendor that this issue is due to a missing
check for "package access" by the MBeanServer Introspector.
Assigned-to
jdstrand
Notes
mdeslaurin lucid+, NetX and the plugin moved to the icedtea-web package
jdstrandsun-java6 is not redistributable, no longer in the archive and
no longer tracked
sun-java5 is EOL upstream and no longer tracked
as of 2013-06-19, upstream IcedTea updates are not available
updates break the icedtea-web plugin and it will need this fix:
http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-June/023745.html
Package
Upstream:pending (6b27-1.12.6)
Package
Upstream:needs-triage
Package
Upstream:pending (2.3.10)
More Information

Updated: 2020-03-18 22:12:34 UTC (commit 2ea7df7bd1e69e1e489978d2724a936eb3faa1b8)