---
title: "CVE-2013-5802\n    | Ubuntu"
description: Ubuntu is an open source software operating system that runs from the
  desktop, to the cloud, to all your internet connected things.
url: https://ubuntu.com/security/CVE-2013-5802?format=md
keywords: index, follow
---

# CVE-2013-5802

Publication date 16 October 2013

Last updated 24 July 2024

---

Ubuntu priority

**Medium**

[Why this priority?](https://ubuntu.com/security/cves/about#priority )

Toggle side navigation

## Description

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60
and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier,
JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows
remote attackers to affect confidentiality, integrity, and availability via
vectors related to JAXP.

[Read the notes from the security team](https://ubuntu.com/security/CVE-2013-5802?format=md#notes)

## Status

Show unmaintained releases

| Package | Ubuntu Release | Status |
| --- | --- | --- |
| openjdk-6 | 13.10 saucy | Fixed 6b27-1.12.6-1ubuntu2.1 |
| 13.04 raring | Fixed 6b27-1.12.6-1ubuntu0.13.04.4 |
| 12.10 quantal | Fixed 6b27-1.12.6-1ubuntu0.12.10.4 |
| 12.04 LTS precise | Fixed 6b27-1.12.6-1ubuntu0.12.04.3 |
| 10.04 LTS lucid | Fixed 6b27-1.12.6-1ubuntu0.10.04.3 |
| openjdk-7 | 13.10 saucy | Fixed 7u51-2.4.4-0ubuntu0.13.10.1 |
| 13.04 raring | Fixed 7u51-2.4.4-0ubuntu0.13.04.2 |
| 12.10 quantal | Fixed 7u51-2.4.4-0ubuntu0.12.10.2 |
| 12.04 LTS precise | Fixed 7u51-2.4.4-0ubuntu0.12.04.2 |
| 10.04 LTS lucid | Not in release |

---

* [How can I get the fixes?](https://ubuntu.com/security/cves/about#security)
* [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses)

## Notes

---

### [jdstrand](https://launchpad.net/~jdstrand)

no 2.3 update as of 2013/12/20. 2.4/armhf needs to be fixed

## References

* [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802)
* [NVD](https://nvd.nist.gov/vuln/detail/CVE-2013-5802)
* [Launchpad](https://launchpad.net/bugs/cve/CVE-2013-5802)
* [Debian](https://security-tracker.debian.org/tracker/CVE-2013-5802)

### Related Ubuntu Security Notices (USN)

+ [USN-2033-1](https://usn.ubuntu.com/USN-2033-1)
+ OpenJDK 6 vulnerabilities
+ 21 November 2013

+ [USN-2089-1](https://usn.ubuntu.com/USN-2089-1)
+ OpenJDK 7 vulnerabilities
+ 23 January 2014

### Other references

* <http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html>
* <https://www.cve.org/CVERecord?id=CVE-2013-5802>