WaratekVRT Sign in

Oracle Critical Patch Update April 2014

Released April 2014 · Oracle's advisory ↗ · ← Critical Patch Update, January 2014 · Critical Patch Update, July 2014 →

104 CVEs in this release, one square each

Protected by WaratekMitigation candidateMitigation candidateNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicable
Share this chart Oracle Critical Patch Update April 2014, one square per CVE: 46 Java CVEs, 1 protected by Waratek, 58 other CVEs in this release.

Download the image

By status

1Protected by Waratek2Mitigation candidate43No exploit published33Outside Waratek scope25Not applicable

No exploit published. For 41 of them, Oracle's security advisory is the source of public detail.

Protected by Waratek. Waratek RASP can block exploitation of these on systems that have not applied the patch yet.

Reset
More filters
Columns
Including CVEs outside Waratek scope✕
Overview 104 matches · 46 in Waratek scope · 1 protected · 0 exploited · 0 CISA KEV · 3 public PoC · 0 EPSS ≥ 0.5
104matches 46in Waratek scope44.2% 1protected1.0% 0exploited0.0% 0CISA KEV0.0% 3public PoC2.9% 0EPSS ≥ 0.50.0%
Protected by Waratek 1 1.0% Rule in development 0 0.0% Mitigation candidate 2 1.9% No exploit published 43 41.3% Outside Waratek scope 33 31.7% Not applicable 25 24.0% Withdrawn CVE 0 0.0%
Critical 0 0.0% High 24 23.1% Medium 67 64.4% Low 13 12.5% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 1 1.0% partly blocked 0 0.0% not blocked 103 99.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 3 2.9% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 101 97.1%
split by peak 98 / month
Not applicable: 25Outside Waratek scope: 33No exploit published: 43Mitigation candidate: 2Protected by Waratek: 1 Low: 13Medium: 67High: 24 not blocked: 103blocked by ARMR today: 1 No public exploit: 101Working exploit published: 3
Feb 131 Not applicable1 Medium1 not blocked1 No public exploit1 Mar 130 Apr 130 May 130 Jun 130 Jul 130 Aug 130 Sep 130 Oct 130 Nov 131 Not applicable1 Medium1 not blocked1 No public exploit1 Dec 130 Jan 142 Not applicable2 High1 Medium1 not blocked2 No public exploit2 Feb 141 No exploit published1 Medium1 not blocked1 No public exploit1 Mar 141 Not applicable1 Medium1 not blocked1 Working exploit published1 Apr 1498 Protected by Waratek1 Mitigation candidate2 No exploit published42 Outside Waratek scope33 Not applicable20 High23 Medium62 Low13 blocked by ARMR today1 not blocked97 Working exploit published2 No public exploit96
Feb 13Apr 13Jun 13Aug 13Oct 13Dec 13Feb 14Apr 14
104 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 2 of 2 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2013-6954 Medium 2014-01-12 Not applicable No public exploit The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via (1) a PLTE chunk of zero bytes or (2) a NULL palette, related to pngrtran.c and pngset.c.
CVE-2013-6462 High 2014-01-09 Not applicable No public exploit Stack-based buffer overflow in the bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont 1.1 through 1.4.6 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string in a character name in a BDF font file.
CVE-2013-6629 Medium 2013-11-19 Not applicable No public exploit The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not check for certain duplications of component data during the reading of segments that follow Start Of Scan (SOS) JPEG markers, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted JPEG image.
CVE-2013-1620 Medium 2013-02-08 Not applicable No public exploit The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.
‹ prev page 2 of 2 next ›