CVE-2015-0383

CVE-2015-0383 is a medium-severity vulnerability in Oracle Jdk with a CVSS 2.0 base score of 5.4. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

• Severity: Medium (CVSS 2.0 base score 5.4)
• EPSS exploit prediction: 0% (36th percentile)
• Actively exploited: Not listed in CISA KEV
• Affected product: Oracle Jdk
• Published: 2015-01-21
• Last modified: 2026-06-17

Description

Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allows local users to affect integrity and availability via unknown vectors related to Hotspot.

Frequently asked questions

What is CVE-2015-0383?

Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allows local users to affect integrity and availability via unknown vectors related to Hotspot.

How severe is CVE-2015-0383?

CVE-2015-0383 has a CVSS 2.0 base score of 5.4, rated medium severity.

Is CVE-2015-0383 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (36th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2015-0383?

CVE-2015-0383 primarily affects Oracle Jdk. In total, 29 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2015-0383?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2015-0383 published?

CVE-2015-0383 was published on 2015-01-21 and last updated on 2026-06-17.

References

• http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581
• http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158088.html
• http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158791.html
• http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158810.html
• http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html
• http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html
• http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html
• http://marc.info/?l=bugtraq&m=142496355704097&w=2
• http://marc.info/?l=bugtraq&m=142607790919348&w=2
• http://rhn.redhat.com/errata/RHSA-2015-0068.html
• http://rhn.redhat.com/errata/RHSA-2015-0079.html
• http://rhn.redhat.com/errata/RHSA-2015-0080.html
• http://rhn.redhat.com/errata/RHSA-2015-0085.html
• http://rhn.redhat.com/errata/RHSA-2015-0086.html
• http://www.debian.org/security/2015/dsa-3144
• http://www.debian.org/security/2015/dsa-3147
• http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
• http://www.securityfocus.com/bid/72155
• http://www.securitytracker.com/id/1031580
• http://www.ubuntu.com/usn/USN-2486-1
• http://www.ubuntu.com/usn/USN-2487-1
• http://www.vmware.com/security/advisories/VMSA-2015-0003.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/100148
• https://security.gentoo.org/glsa/201507-14
• https://security.gentoo.org/glsa/201603-14

Affected products (29)

• cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*
• cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
• cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
• cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*
• cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
• cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
• cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*
• cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*
• cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*
• cpe:2.3:o:novell:suse_linux_enterprise_desktop:11.0:sp3:*:*:*:*:*:*
• cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:*:*:*:*:*:*:*
• cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
• cpe:2.3:a:oracle:jdk:1.5.0:update75:*:*:*:*:*:*
• cpe:2.3:a:oracle:jdk:1.6.0:update85:*:*:*:*:*:*
• cpe:2.3:a:oracle:jdk:1.7.0:update71:*:*:*:*:*:*
• cpe:2.3:a:oracle:jdk:1.7.0:update72:*:*:*:*:*:*
• cpe:2.3:a:oracle:jdk:1.8.0:update25:*:*:*:*:*:*
• cpe:2.3:a:oracle:jdk:1.8.0:update6:*:*:*:*:*:*
• cpe:2.3:a:oracle:jre:1.5.0:update75:*:*:*:*:*:*
• cpe:2.3:a:oracle:jre:1.6.0:update85:*:*:*:*:*:*
• cpe:2.3:a:oracle:jre:1.7.0:update71:*:*:*:*:*:*
• cpe:2.3:a:oracle:jre:1.7.0:update72:*:*:*:*:*:*
• cpe:2.3:a:oracle:jre:1.8.0:update25:*:*:*:*:*:*
• cpe:2.3:a:oracle:jre:1.8.0:update6:*:*:*:*:*:*
• cpe:2.3:a:oracle:jrockit:r27.8.4:*:*:*:*:*:*:*
• cpe:2.3:a:oracle:jrockit:r28.3.4:*:*:*:*:*:*:*

More vulnerabilities in Oracle Jdk

• CVE-2016-0494 — Critical (CVSS 10.0): Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and…
• CVE-2016-0483 — Critical (CVSS 10.0): Unspecified vulnerability in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows…
• CVE-2015-4883 — Critical (CVSS 10.0): Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers…
• CVE-2015-4881 — Critical (CVSS 10.0): Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers…
• CVE-2015-4860 — Critical (CVSS 10.0): Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers…
• CVE-2015-4844 — Critical (CVSS 10.0): Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers…

All CVEs affecting Oracle Jdk →