CVE:CVE-2015-0383
CNNVD:CNNVD-201501-506
Oracle Java SE、Java SE Embedded和JRockit都是美国甲骨文（Oracle）公司的产品。Java SE（Java 平台标准版）用于开发和部署桌面、服务器以及嵌入设备和实时环境中的Java应用程序；Java SE Embedded是一款针对嵌入式系统开发功能强大、可靠、可移植的应用程序的Java平台；JRockit是一款内置于Oracle融合中间件中的Java虚拟机。
多款Oracle组件的Hotspot子组件存在安全漏洞。本地攻击者可利用该漏洞更新、插入或删除数据，也可能造成拒绝服务。影响数据的完整性和可用性。以下组件和版本受到影响：Oracle Java SE 5.0u75，6u85，7u72，8u25；Java SE Embedded 7u71，8u6；JRockit R27.8.4，R28.3.4。
solution:Upgrade canonical ubuntu_linux to a higher version than 10.04,12.04,14.04,14.10,and avoid the version 10.04,12.04,14.04,14.10; Upgrade debian debian_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade fedoraproject fedora to a higher version than 20,21,22,and avoid the version 20,21,22; Upgrade novell suse_linux_enterprise_desktop to a higher version than 11.0:sp3,and avoid the version 11.0:sp3; Upgrade novell suse_linux_enterprise_server to a higher version than 12.0,and avoid the version 12.0; Upgrade opensuse opensuse to a higher version than 13.2,and avoid the version 13.2; Upgrade redhat enterprise_linux to a higher version than 5,6.0,7.0,and avoid the version 5,6.0,7.0; Upgrade oracle jdk to a higher version than 1.5.0:update75,1.6.0:update85,1.7.0:update71,1.7.0:update72,1.8.0:update25,1.8.0:update6,and avoid the version 1.5.0:update75,1.6.0:update85,1.7.0:update71,1.7.0:update72,1.8.0:update25,1.8.0:update6; Upgrade oracle jre to a higher version than 1.5.0:update75,1.6.0:update85,1.7.0:update71,1.7.0:update72,1.8.0:update25,1.8.0:update6,and avoid the version 1.5.0:update75,1.6.0:update85,1.7.0:update71,1.7.0:update72,1.8.0:update25,1.8.0:update6; Upgrade oracle jrockit to a higher version than r27.8.4,r28.3.4,and avoid the version r27.8.4,r28.3.4