Oracle OpenJDK 1.7.0 Update 9
Approved changes feed: RSS · Atom
cpe:2.3:a:oracle:openjdk:1.7.0:update9:*:*:*:*:*:*
part: a version: 1.7.0 update: update9
| Vendor | Oracle (3509f9eb-d8a0-57da-b153-b8021021b133) |
|---|---|
| Product | Openjdk (8263daec-d494-5223-bb1f-fd54ac9e7e03) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/openjdk/jdk |
purl2cpe | 2026-06-01 10:18:14.464692 |
pkg:openjdk.java/jdk |
purl2cpe | 2026-06-01 10:18:14.464693 |
pkg:rpm/fedora/java-1.6.0-openjdk |
purl2cpe | 2026-06-01 10:18:14.464695 |
pkg:rpm/opensuse/java-1.6.0-openjdk |
purl2cpe | 2026-06-01 10:18:14.464696 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-0169 |
vulnerable | 2026-06-08 05:03:02.280496 |
Details available
The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the "Lucky Thirteen" issue.
Published: 2013-02-08T19:00:00.000Z
Updated: 2024-08-06T14:18:09.503Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.