CVE-2014-2483

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2014-07-17 · updated 2026-06-17

Description

Unspecified vulnerability in the Java SE component in Oracle Java SE Java SE 7u60 and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-4223. NOTE: the previous information is from the July 2014 CPU. Oracle has not commented on another vendor's claim that the issue is related to improper restriction of the "use of privileged annotations."

Affected products

Debian Linux: 7.0
Oracle Java SE: 1.7.0-update60
Oracle Java SE: 1.7.0-update60
containers/openjdk: 1.7.0
Red Hat Enterprise Linux: 5, 6.0, 7.0

References

http://hg.openjdk.java.net/jdk7u/jdk7u/hotspot/rev/848481af9003
http://marc.info/?l=bugtraq&m=140852886808946&w=2
http://seclists.org/fulldisclosure/2014/Dec/23
http://secunia.com/advisories/60485
http://secunia.com/advisories/60812
http://security.gentoo.org/glsa/glsa-201502-12.xml
http://www.debian.org/security/2014/dsa-2987
http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
http://www.securityfocus.com/archive/1/534161/100/0/threaded
http://www.securityfocus.com/bid/68608
http://www.securitytracker.com/id/1030577
http://www.vmware.com/security/advisories/VMSA-2014-0012.html

Get alerted when CVE-2014-2483 or the next vulnerability affects your stack