Debian Security Advisory DSA 3401-1 (openjdk-7 - security update)

CVSS Base Vector:
AV:N/AC:M/Au:N/C:P/I:P/A:N

Solution Type:
Vendor Patch

Detection Type:
Linux Distribution Package

Affected Versions:
openjdk-7 on Debian Linux

Recommendations:
For the oldstable distribution (wheezy), this problem has been fixed in version 7u91-2.6.3-1~deb7u1. For the stable distribution (jessie), this problem has been fixed in version 7u91-2.6.3-1~deb8u1. For the unstable distribution (sid), this problem has been fixed in version 7u91-2.6.3-1. We recommend that you upgrade your openjdk-7 Linux Distribution Packages.

Summary:
It was discovered that rebinding a receiver of a direct method handle may allow a protected method to be accessed.

Detection Method:
This check tests the installed software version using the apt Linux Distribution Package manager.

NIST (National Institute of Standards and Technology) NVD (National Vulnerability Database)

https://nvd.nist.gov/vuln/detail/CVE-2015-4871

References:

http://www.debian.org/security/2015/dsa-3401.html