CVE-2015-0192 Privilege escalation in n/a
Remote attackers can gain elevated privileges via unspecified vectors in the IBM Java Virtual Machine, requiring an upgrade to patched versions.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2015-0192?
CVE-2015-0192 is a critical vulnerability in Redhat Enterprise Linux Desktop, published on 2 Jul 2015. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Unspecified vulnerability in IBM Java 8 before SR1, 7 R1 before SR2 FP11, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before SR16 FP10 allows remote attackers to gain privileges via unknown vectors related to the Java Virtual Machine.
Weakness: CWE-269
Which versions are affected by CVE-2015-0192?
It affects 8 products.
Products include Ibm Java, Redhat Enterprise Linux Desktop, Redhat Enterprise Linux Server, Redhat Enterprise Linux Server Aus, Redhat Enterprise Linux Server Eus, Redhat Enterprise Linux Workstation and 2 more.
How do I fix CVE-2015-0192?
Upgrade to a fixed version.
Is CVE-2015-0192 being exploited?
There is no known exploitation of CVE-2015-0192 in the wild and no public exploit code.
Other vulnerabilities in Redhat Enterprise Linux Desktop
Sources
Also known as GHSA-3q8x-6m7c-5p98.