GCVE - cpe:2.3:a:oracle:openjdk:1.6.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:openjdk:1.6.0:*:*:*:*:*:*:*

part: a version: 1.6.0 update: *

Vendor	Oracle (`3509f9eb-d8a0-57da-b153-b8021021b133`)
Product	Openjdk (`8263daec-d494-5223-bb1f-fd54ac9e7e03`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/openjdk/jdk`	purl2cpe	2026-06-01 10:18:14.464386
`pkg:openjdk.java/jdk`	purl2cpe	2026-06-01 10:18:14.464387
`pkg:rpm/fedora/java-1.6.0-openjdk`	purl2cpe	2026-06-01 10:18:14.464389
`pkg:rpm/opensuse/java-1.6.0-openjdk`	purl2cpe	2026-06-01 10:18:14.464391

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-2405`	vulnerable	2026-06-08 05:05:28.729298	Details available Unspecified vulnerability in OpenJDK 6 before 6b31 on Debian GNU/Linux and Ubuntu 12.04 LTS and 10.04 LTS has unknown impact and attack vectors, a different vulnerability than CVE-2014-0462. Published: 2014-05-14T00:00:00.000Z Updated: 2024-08-06T10:14:26.232Z Open on db.gcve.eu Reference links http://www.ubuntu.com/usn/USN-2191-1 http://www.debian.org/security/2014/dsa-2912 http://secunia.com/advisories/58415	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-1876`	vulnerable	2026-06-08 05:05:26.540768	Details available The unpacker::redirect_stdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8; Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 does not securely create temporary files when a log file cannot be opened, which allows local users to overwrite arbitrary files via a symlink attack on /tmp/unpack.log. Published: 2014-02-10T23:00:00.000Z Updated: 2024-08-06T09:58:15.835Z Open on db.gcve.eu Reference links http://www.ubuntu.com/usn/USN-2187-1 http://rhn.redhat.com/errata/RHSA-2014-0675.html https://access.redhat.com/errata/RHSA-2014:0414 http://security.gentoo.org/glsa/glsa-201406-32.xml http://www.ubuntu.com/usn/USN-2191-1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-0462`	vulnerable	2026-06-08 05:05:12.888117	Details available Unspecified vulnerability in OpenJDK 6 before 6b31 on Debian GNU/Linux and Ubuntu 12.04 LTS and 10.04 LTS has unknown impact and attack vectors, a different vulnerability than CVE-2014-2405. Published: 2014-05-14T00:00:00.000Z Updated: 2024-08-06T09:13:10.733Z Open on db.gcve.eu Reference links http://www.ubuntu.com/usn/USN-2191-1 http://www.debian.org/security/2014/dsa-2912 http://secunia.com/advisories/58415	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-2739`	vulnerable	2026-06-08 05:02:06.030679	Details available Oracle Java SE before 7 Update 6, and OpenJDK 7 before 7u6 build 12 and 8 before build 39, computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table. Published: 2012-11-28T11:00:00.000Z Updated: 2024-08-06T19:42:32.448Z Open on db.gcve.eu Reference links http://www.nruns.com/_downloads/advisory28122011.pdf http://armoredbarista.blogspot.de/2012/02/investigating-hashdos-issue.html https://bugzilla.redhat.com/show_bug.cgi?id=750533 http://www.openwall.com/lists/oss-security/2012/06/17/1 http://www.kb.cert.org/vuls/id/903934	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.