CVE-2016-3606 - Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 and Java SE Embedded 8u91 allows remote a

CVE-2016-3606

Summary

Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot.

References

Vulnerable Configurations

cpe:2.3:a:oracle:linux:5.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:linux:5.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:linux:6.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:linux:6.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:linux:7.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:linux:7.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.8.0:update91:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.8.0:update91:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.8.0:update92:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.8.0:update92:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.7.0:update101:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.7.0:update101:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.8.0:update92:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.8.0:update92:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.7.0:update101:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.7.0:update101:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.8.0:update91:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.8.0:update91:*:*:*:*:*:*

CVSS

Base:	6.8 (as of 13-05-2022 - 14:57)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:M/Au:N/C:P/I:P/A:P

redhat via4

advisories

bugzilla

id	1358170
title	CVE-2016-3498 Oracle JDK: unspecified vulnerability fixed in 7u111 and 8u101 (JavaFX)

oval

comment Red Hat Enterprise Linux must be installed
oval oval:com.redhat.rhba:tst:20070304026

AND

comment Red Hat Enterprise Linux 5 is installed
oval oval:com.redhat.rhba:tst:20070331005

AND

comment java-1.7.0-oracle is earlier than 1:1.7.0.111-1jpp.1.el5_11
oval oval:com.redhat.rhsa:tst:20161476001
comment java-1.7.0-oracle is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20140413002

AND

comment java-1.7.0-oracle-devel is earlier than 1:1.7.0.111-1jpp.1.el5_11
oval oval:com.redhat.rhsa:tst:20161476003
comment java-1.7.0-oracle-devel is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20140413004

AND

comment java-1.7.0-oracle-javafx is earlier than 1:1.7.0.111-1jpp.1.el5_11
oval oval:com.redhat.rhsa:tst:20161476005
comment java-1.7.0-oracle-javafx is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20140413006

AND

comment java-1.7.0-oracle-jdbc is earlier than 1:1.7.0.111-1jpp.1.el5_11
oval oval:com.redhat.rhsa:tst:20161476007
comment java-1.7.0-oracle-jdbc is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20140413008

AND

comment java-1.7.0-oracle-plugin is earlier than 1:1.7.0.111-1jpp.1.el5_11
oval oval:com.redhat.rhsa:tst:20161476009
comment java-1.7.0-oracle-plugin is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20140413010

AND

comment java-1.7.0-oracle-src is earlier than 1:1.7.0.111-1jpp.1.el5_11
oval oval:com.redhat.rhsa:tst:20161476011
comment java-1.7.0-oracle-src is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20140413012

AND

comment Red Hat Enterprise Linux 7 is installed
oval oval:com.redhat.rhba:tst:20150364027

AND

comment java-1.7.0-oracle is earlier than 1:1.7.0.111-1jpp.1.el7
oval oval:com.redhat.rhsa:tst:20161476014
comment java-1.7.0-oracle is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140413015

AND

comment java-1.7.0-oracle-devel is earlier than 1:1.7.0.111-1jpp.1.el7
oval oval:com.redhat.rhsa:tst:20161476016
comment java-1.7.0-oracle-devel is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140413017

AND

comment java-1.7.0-oracle-javafx is earlier than 1:1.7.0.111-1jpp.1.el7
oval oval:com.redhat.rhsa:tst:20161476018
comment java-1.7.0-oracle-javafx is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140413019

AND

comment java-1.7.0-oracle-jdbc is earlier than 1:1.7.0.111-1jpp.1.el7
oval oval:com.redhat.rhsa:tst:20161476020
comment java-1.7.0-oracle-jdbc is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140413021

AND

comment java-1.7.0-oracle-plugin is earlier than 1:1.7.0.111-1jpp.1.el7
oval oval:com.redhat.rhsa:tst:20161476022
comment java-1.7.0-oracle-plugin is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140413023

AND

comment java-1.7.0-oracle-src is earlier than 1:1.7.0.111-1jpp.1.el7
oval oval:com.redhat.rhsa:tst:20161476024
comment java-1.7.0-oracle-src is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140413025

AND

comment Red Hat Enterprise Linux 6 is installed
oval oval:com.redhat.rhba:tst:20111656003

AND

comment java-1.7.0-oracle is earlier than 1:1.7.0.111-1jpp.1.el6_8
oval oval:com.redhat.rhsa:tst:20161476027
comment java-1.7.0-oracle is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140413015

AND

comment java-1.7.0-oracle-devel is earlier than 1:1.7.0.111-1jpp.1.el6_8
oval oval:com.redhat.rhsa:tst:20161476028
comment java-1.7.0-oracle-devel is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140413017

AND

comment java-1.7.0-oracle-javafx is earlier than 1:1.7.0.111-1jpp.1.el6_8
oval oval:com.redhat.rhsa:tst:20161476029
comment java-1.7.0-oracle-javafx is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140413019

AND

comment java-1.7.0-oracle-jdbc is earlier than 1:1.7.0.111-1jpp.1.el6_8
oval oval:com.redhat.rhsa:tst:20161476030
comment java-1.7.0-oracle-jdbc is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140413021

AND

comment java-1.7.0-oracle-plugin is earlier than 1:1.7.0.111-1jpp.1.el6_8
oval oval:com.redhat.rhsa:tst:20161476031
comment java-1.7.0-oracle-plugin is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140413023

AND

comment java-1.7.0-oracle-src is earlier than 1:1.7.0.111-1jpp.1.el6_8
oval oval:com.redhat.rhsa:tst:20161476032
comment java-1.7.0-oracle-src is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140413025

rhsa

id	RHSA-2016:1476
released	2016-07-21
severity	Critical
title	RHSA-2016:1476: java-1.7.0-oracle security update (Critical)

bugzilla

id	1357506
title	CVE-2016-3550 OpenJDK: integer overflows in bytecode streams (Hotspot, 8152479)

oval

comment Red Hat Enterprise Linux must be installed
oval oval:com.redhat.rhba:tst:20070304026

AND

comment Red Hat Enterprise Linux 5 is installed
oval oval:com.redhat.rhba:tst:20070331005

AND

comment java-1.6.0-openjdk is earlier than 1:1.6.0.40-1.13.12.4.el5_11
oval oval:com.redhat.rhsa:tst:20161776001
comment java-1.6.0-openjdk is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20090377002

AND

comment java-1.6.0-openjdk-demo is earlier than 1:1.6.0.40-1.13.12.4.el5_11
oval oval:com.redhat.rhsa:tst:20161776003
comment java-1.6.0-openjdk-demo is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20090377004

AND

comment java-1.6.0-openjdk-devel is earlier than 1:1.6.0.40-1.13.12.4.el5_11
oval oval:com.redhat.rhsa:tst:20161776005
comment java-1.6.0-openjdk-devel is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20090377006

AND

comment java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.40-1.13.12.4.el5_11
oval oval:com.redhat.rhsa:tst:20161776007
comment java-1.6.0-openjdk-javadoc is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20090377008

AND

comment java-1.6.0-openjdk-src is earlier than 1:1.6.0.40-1.13.12.4.el5_11
oval oval:com.redhat.rhsa:tst:20161776009
comment java-1.6.0-openjdk-src is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20090377010

AND

comment Red Hat Enterprise Linux 7 is installed
oval oval:com.redhat.rhba:tst:20150364027

AND

comment java-1.6.0-openjdk is earlier than 1:1.6.0.40-1.13.12.5.el7_2
oval oval:com.redhat.rhsa:tst:20161776012
comment java-1.6.0-openjdk is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20100865002

AND

comment java-1.6.0-openjdk-demo is earlier than 1:1.6.0.40-1.13.12.5.el7_2
oval oval:com.redhat.rhsa:tst:20161776014
comment java-1.6.0-openjdk-demo is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20100865004

AND

comment java-1.6.0-openjdk-devel is earlier than 1:1.6.0.40-1.13.12.5.el7_2
oval oval:com.redhat.rhsa:tst:20161776016
comment java-1.6.0-openjdk-devel is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20100865006

AND

comment java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.40-1.13.12.5.el7_2
oval oval:com.redhat.rhsa:tst:20161776018
comment java-1.6.0-openjdk-javadoc is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20100865008

AND

comment java-1.6.0-openjdk-src is earlier than 1:1.6.0.40-1.13.12.5.el7_2
oval oval:com.redhat.rhsa:tst:20161776020
comment java-1.6.0-openjdk-src is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20100865010

AND

comment Red Hat Enterprise Linux 6 is installed
oval oval:com.redhat.rhba:tst:20111656003

AND

comment java-1.6.0-openjdk is earlier than 1:1.6.0.40-1.13.12.6.el6_8
oval oval:com.redhat.rhsa:tst:20161776023
comment java-1.6.0-openjdk is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20100865002

AND

comment java-1.6.0-openjdk-demo is earlier than 1:1.6.0.40-1.13.12.6.el6_8
oval oval:com.redhat.rhsa:tst:20161776024
comment java-1.6.0-openjdk-demo is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20100865004

AND

comment java-1.6.0-openjdk-devel is earlier than 1:1.6.0.40-1.13.12.6.el6_8
oval oval:com.redhat.rhsa:tst:20161776025
comment java-1.6.0-openjdk-devel is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20100865006

AND

comment java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.40-1.13.12.6.el6_8
oval oval:com.redhat.rhsa:tst:20161776026
comment java-1.6.0-openjdk-javadoc is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20100865008

AND

comment java-1.6.0-openjdk-src is earlier than 1:1.6.0.40-1.13.12.6.el6_8
oval oval:com.redhat.rhsa:tst:20161776027
comment java-1.6.0-openjdk-src is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20100865010

rhsa

id	RHSA-2016:1776
released	2016-08-26
severity	Important
title	RHSA-2016:1776: java-1.6.0-openjdk security update (Important)

rhsa
id RHSA-2016:1458
rhsa
id RHSA-2016:1475
rhsa
id RHSA-2016:1504

rpms

java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8
java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2
java-1.8.0-openjdk-accessibility-1:1.8.0.101-3.b13.el7_2
java-1.8.0-openjdk-accessibility-debug-1:1.8.0.101-3.b13.el7_2
java-1.8.0-openjdk-debug-1:1.8.0.101-3.b13.el6_8
java-1.8.0-openjdk-debug-1:1.8.0.101-3.b13.el7_2
java-1.8.0-openjdk-debuginfo-1:1.8.0.101-3.b13.el6_8
java-1.8.0-openjdk-debuginfo-1:1.8.0.101-3.b13.el7_2
java-1.8.0-openjdk-demo-1:1.8.0.101-3.b13.el6_8
java-1.8.0-openjdk-demo-1:1.8.0.101-3.b13.el7_2
java-1.8.0-openjdk-demo-debug-1:1.8.0.101-3.b13.el6_8
java-1.8.0-openjdk-demo-debug-1:1.8.0.101-3.b13.el7_2
java-1.8.0-openjdk-devel-1:1.8.0.101-3.b13.el6_8
java-1.8.0-openjdk-devel-1:1.8.0.101-3.b13.el7_2
java-1.8.0-openjdk-devel-debug-1:1.8.0.101-3.b13.el6_8
java-1.8.0-openjdk-devel-debug-1:1.8.0.101-3.b13.el7_2
java-1.8.0-openjdk-headless-1:1.8.0.101-3.b13.el6_8
java-1.8.0-openjdk-headless-1:1.8.0.101-3.b13.el7_2
java-1.8.0-openjdk-headless-debug-1:1.8.0.101-3.b13.el6_8
java-1.8.0-openjdk-headless-debug-1:1.8.0.101-3.b13.el7_2
java-1.8.0-openjdk-javadoc-1:1.8.0.101-3.b13.el6_8
java-1.8.0-openjdk-javadoc-1:1.8.0.101-3.b13.el7_2
java-1.8.0-openjdk-javadoc-debug-1:1.8.0.101-3.b13.el6_8
java-1.8.0-openjdk-javadoc-debug-1:1.8.0.101-3.b13.el7_2
java-1.8.0-openjdk-src-1:1.8.0.101-3.b13.el6_8
java-1.8.0-openjdk-src-1:1.8.0.101-3.b13.el7_2
java-1.8.0-openjdk-src-debug-1:1.8.0.101-3.b13.el6_8
java-1.8.0-openjdk-src-debug-1:1.8.0.101-3.b13.el7_2
java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8
java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7
java-1.8.0-oracle-devel-1:1.8.0.101-1jpp.1.el6_8
java-1.8.0-oracle-devel-1:1.8.0.101-1jpp.1.el7
java-1.8.0-oracle-javafx-1:1.8.0.101-1jpp.1.el6_8
java-1.8.0-oracle-javafx-1:1.8.0.101-1jpp.1.el7
java-1.8.0-oracle-jdbc-1:1.8.0.101-1jpp.1.el6_8
java-1.8.0-oracle-jdbc-1:1.8.0.101-1jpp.1.el7
java-1.8.0-oracle-plugin-1:1.8.0.101-1jpp.1.el6_8
java-1.8.0-oracle-plugin-1:1.8.0.101-1jpp.1.el7
java-1.8.0-oracle-src-1:1.8.0.101-1jpp.1.el6_8
java-1.8.0-oracle-src-1:1.8.0.101-1jpp.1.el7
java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el5_11
java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el6_8
java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el7
java-1.7.0-oracle-devel-1:1.7.0.111-1jpp.1.el5_11
java-1.7.0-oracle-devel-1:1.7.0.111-1jpp.1.el6_8
java-1.7.0-oracle-devel-1:1.7.0.111-1jpp.1.el7
java-1.7.0-oracle-javafx-1:1.7.0.111-1jpp.1.el5_11
java-1.7.0-oracle-javafx-1:1.7.0.111-1jpp.1.el6_8
java-1.7.0-oracle-javafx-1:1.7.0.111-1jpp.1.el7
java-1.7.0-oracle-jdbc-1:1.7.0.111-1jpp.1.el5_11
java-1.7.0-oracle-jdbc-1:1.7.0.111-1jpp.1.el6_8
java-1.7.0-oracle-jdbc-1:1.7.0.111-1jpp.1.el7
java-1.7.0-oracle-plugin-1:1.7.0.111-1jpp.1.el5_11
java-1.7.0-oracle-plugin-1:1.7.0.111-1jpp.1.el6_8
java-1.7.0-oracle-plugin-1:1.7.0.111-1jpp.1.el7
java-1.7.0-oracle-src-1:1.7.0.111-1jpp.1.el5_11
java-1.7.0-oracle-src-1:1.7.0.111-1jpp.1.el6_8
java-1.7.0-oracle-src-1:1.7.0.111-1jpp.1.el7
java-1.7.0-openjdk-1:1.7.0.111-2.6.7.1.el5_11
java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el6_8
java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el7_2
java-1.7.0-openjdk-accessibility-1:1.7.0.111-2.6.7.2.el7_2
java-1.7.0-openjdk-debuginfo-1:1.7.0.111-2.6.7.1.el5_11
java-1.7.0-openjdk-debuginfo-1:1.7.0.111-2.6.7.2.el6_8
java-1.7.0-openjdk-debuginfo-1:1.7.0.111-2.6.7.2.el7_2
java-1.7.0-openjdk-demo-1:1.7.0.111-2.6.7.1.el5_11
java-1.7.0-openjdk-demo-1:1.7.0.111-2.6.7.2.el6_8
java-1.7.0-openjdk-demo-1:1.7.0.111-2.6.7.2.el7_2
java-1.7.0-openjdk-devel-1:1.7.0.111-2.6.7.1.el5_11
java-1.7.0-openjdk-devel-1:1.7.0.111-2.6.7.2.el6_8
java-1.7.0-openjdk-devel-1:1.7.0.111-2.6.7.2.el7_2
java-1.7.0-openjdk-headless-1:1.7.0.111-2.6.7.2.el7_2
java-1.7.0-openjdk-javadoc-1:1.7.0.111-2.6.7.1.el5_11
java-1.7.0-openjdk-javadoc-1:1.7.0.111-2.6.7.2.el6_8
java-1.7.0-openjdk-javadoc-1:1.7.0.111-2.6.7.2.el7_2
java-1.7.0-openjdk-src-1:1.7.0.111-2.6.7.1.el5_11
java-1.7.0-openjdk-src-1:1.7.0.111-2.6.7.2.el6_8
java-1.7.0-openjdk-src-1:1.7.0.111-2.6.7.2.el7_2
java-1.6.0-openjdk-1:1.6.0.40-1.13.12.4.el5_11
java-1.6.0-openjdk-1:1.6.0.40-1.13.12.5.el7_2
java-1.6.0-openjdk-1:1.6.0.40-1.13.12.6.el6_8
java-1.6.0-openjdk-debuginfo-1:1.6.0.40-1.13.12.4.el5_11
java-1.6.0-openjdk-debuginfo-1:1.6.0.40-1.13.12.5.el7_2
java-1.6.0-openjdk-debuginfo-1:1.6.0.40-1.13.12.6.el6_8
java-1.6.0-openjdk-demo-1:1.6.0.40-1.13.12.4.el5_11
java-1.6.0-openjdk-demo-1:1.6.0.40-1.13.12.5.el7_2
java-1.6.0-openjdk-demo-1:1.6.0.40-1.13.12.6.el6_8
java-1.6.0-openjdk-devel-1:1.6.0.40-1.13.12.4.el5_11
java-1.6.0-openjdk-devel-1:1.6.0.40-1.13.12.5.el7_2
java-1.6.0-openjdk-devel-1:1.6.0.40-1.13.12.6.el6_8
java-1.6.0-openjdk-javadoc-1:1.6.0.40-1.13.12.4.el5_11
java-1.6.0-openjdk-javadoc-1:1.6.0.40-1.13.12.5.el7_2
java-1.6.0-openjdk-javadoc-1:1.6.0.40-1.13.12.6.el6_8
java-1.6.0-openjdk-src-1:1.6.0.40-1.13.12.4.el5_11
java-1.6.0-openjdk-src-1:1.6.0.40-1.13.12.5.el7_2
java-1.6.0-openjdk-src-1:1.6.0.40-1.13.12.6.el6_8

refmap via4

bid	91787 91912
confirm	http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html https://security.netapp.com/advisory/ntap-20160721-0001/
debian	DSA-3641
gentoo	GLSA-201610-08 GLSA-201701-43
sectrack	1036365
suse	SUSE-SU-2016:1997 SUSE-SU-2016:2012 openSUSE-SU-2016:1979 openSUSE-SU-2016:2050 openSUSE-SU-2016:2051 openSUSE-SU-2016:2052 openSUSE-SU-2016:2058
ubuntu	USN-3043-1 USN-3062-1 USN-3077-1

Last major update

13-05-2022 - 14:57

Published

21-07-2016 - 10:14

Last modified

13-05-2022 - 14:57