CVE-2014-6512
Public on 2014-10-15
Modified on 2014-10-16
Description
It was discovered that the DatagramSocket implementation in OpenJDK failed to perform source address checks for packets received on a connected socket. A remote attacker could use this flaw to have their packets processed as if they were received from the expected source.
Severity
See what this means
CVSS v3 Base Score
See breakdown
Affected Packages
Platform | Package | Release Date | Advisory | Status |
---|---|---|---|---|
Amazon Linux 1 | java-1.6.0-openjdk | 2014-10-16 | ALAS-2014-430 | Fixed |
Amazon Linux 1 | java-1.7.0-openjdk | 2014-10-16 | ALAS-2014-431 | Fixed |
Amazon Linux 1 | java-1.8.0-openjdk | 2014-10-16 | ALAS-2014-432 | Fixed |
CVSS Scores
Score Type | Score | Vector | |
---|---|---|---|
Amazon Linux | CVSSv2 | 4.3 | AV:N/AC:M/Au:N/C:N/I:P/A:N |
NVD | CVSSv2 | 4.3 | AV:N/AC:M/Au:N/C:N/I:P/A:N |