CVE-2015-4902 Oracle Java SE Integrity Check

What is CVE-2015-4902?

CVE-2015-4902 is a medium-severity vulnerability in Opensuse Leap, published on 21 Oct 2015. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.

Weakness: CWE-284

Which versions are affected by CVE-2015-4902?

It affects 21 products.

Products include Opensuse Leap, Opensuse Opensuse, Oracle Jdk, Oracle Jre, Redhat Enterprise Linux Desktop, Redhat Enterprise Linux Eus and 15 more.

How do I fix CVE-2015-4902?

Upgrade to a fixed version. US federal agencies must fix it by 24 Mar 2022.

Is CVE-2015-4902 being exploited?

Yes. Attackers have exploited CVE-2015-4902 in the wild since at least 3 Mar 2022.

Other vulnerabilities in Opensuse Leap

• CVE-2017-14804 package builds could use directory traversal to write outside of target area Critical 9.9
• CVE-2019-20787 Teeworlds before 0.7.4 has an integer overflow when computing a tilemap size. Critical 9.8
• CVE-2019-8341 Code injection in n/a Critical 9.8
• CVE-2019-6438 Other in n/a Critical 9.8
• CVE-2017-18215 Memory corruption in n/a Critical 9.8

All Opensuse Leap vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-69xw-2hhx-gvfg.