---
title: "CVE-2013-5820\n    | Ubuntu"
description: Ubuntu is an open source software operating system that runs from the
  desktop, to the cloud, to all your internet connected things.
url: https://ubuntu.com/security/CVE-2013-5820?format=md
keywords: index, follow
---

# CVE-2013-5820

Publication date 16 October 2013

Last updated 24 July 2024

---

Ubuntu priority

**Medium**

[Why this priority?](https://ubuntu.com/security/cves/about#priority )

Toggle side navigation

## Description

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60
and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers
to affect integrity via vectors related to JAX-WS.

[Read the notes from the security team](https://ubuntu.com/security/CVE-2013-5820?format=md#notes)

## Status

Show unmaintained releases

| Package | Ubuntu Release | Status |
| --- | --- | --- |
| openjdk-6 | 13.10 saucy | Fixed 6b27-1.12.6-1ubuntu2.1 |
| 13.04 raring | Fixed 6b27-1.12.6-1ubuntu0.13.04.4 |
| 12.10 quantal | Fixed 6b27-1.12.6-1ubuntu0.12.10.4 |
| 12.04 LTS precise | Fixed 6b27-1.12.6-1ubuntu0.12.04.3 |
| 10.04 LTS lucid | Fixed 6b27-1.12.6-1ubuntu0.10.04.3 |
| openjdk-7 | 13.10 saucy | Fixed 7u51-2.4.4-0ubuntu0.13.10.1 |
| 13.04 raring | Fixed 7u51-2.4.4-0ubuntu0.13.04.2 |
| 12.10 quantal | Fixed 7u51-2.4.4-0ubuntu0.12.10.2 |
| 12.04 LTS precise | Fixed 7u51-2.4.4-0ubuntu0.12.04.2 |
| 10.04 LTS lucid | Not in release |

---

* [How can I get the fixes?](https://ubuntu.com/security/cves/about#security)
* [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses)

## Notes

---

### [jdstrand](https://launchpad.net/~jdstrand)

no 2.3 update as of 2013/12/20. 2.4/armhf needs to be fixed

## References

* [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820)
* [NVD](https://nvd.nist.gov/vuln/detail/CVE-2013-5820)
* [Launchpad](https://launchpad.net/bugs/cve/CVE-2013-5820)
* [Debian](https://security-tracker.debian.org/tracker/CVE-2013-5820)

### Related Ubuntu Security Notices (USN)

+ [USN-2089-1](https://usn.ubuntu.com/USN-2089-1)
+ OpenJDK 7 vulnerabilities
+ 23 January 2014

+ [USN-2033-1](https://usn.ubuntu.com/USN-2033-1)
+ OpenJDK 6 vulnerabilities
+ 21 November 2013

### Other references

* <http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html>
* <https://www.cve.org/CVERecord?id=CVE-2013-5820>