PT-2016-1810 · Oracle+5 · Java Se Embedded+7

Published 2016-04-20 · Updated 2024-06-15 · CVE-2016-0687

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Java SE versions 6u113, 7u99, and 8u77 Java SE Embedded version 8u77

Description The issue is related to errors in the code of the Hotspot component of the Java Platform. It may allow a remote attacker to impact the confidentiality, integrity, and availability of information. The vulnerability can be exploited through vectors related to the Hotspot sub-component.

Recommendations For Java SE versions 6u113, 7u99, and 8u77, update to a version that contains a fix for this issue. For Java SE Embedded version 8u77, update to a version that contains a fix for this issue. As a temporary workaround, consider restricting access to the Hotspot sub-component until a patch is available.

Fix

Weakness Enumeration

CWE-17

Related Identifiers

BDU:2016-01143

CESA-2016_0650

CESA-2016_0651

CESA-2016_0675

CESA-2016_0676

CESA-2016_0723

CVE-2016-0687

DLA-451-1

DSA-3558-1

MGASA-2016-0149

OPENSUSE-SU-2016_1222-1

OPENSUSE-SU-2016_1230-1

OPENSUSE-SU-2016_1235-1

OPENSUSE-SU-2016_1262-1

OPENSUSE-SU-2016_1265-1

OPENSUSE-SU-2024:10197-1

OPENSUSE-SU-2024:10534-1

RHSA-2016:0650

RHSA-2016:0651

RHSA-2016:0675

RHSA-2016:0676

RHSA-2016:0677

RHSA-2016:0678

RHSA-2016:0679

RHSA-2016:0701

RHSA-2016:0702

RHSA-2016:0708

RHSA-2016:0716

RHSA-2016:0723

RHSA-2016:1039

RHSA-2016:1430

RHSA-2016_0650

RHSA-2016_0651

RHSA-2016_0675

RHSA-2016_0676

RHSA-2016_0677

RHSA-2016_0678

RHSA-2016_0679

RHSA-2016_0701

RHSA-2016_0708

RHSA-2016_0716

RHSA-2016_0723

RHSA-2016_1039

RHSA-2017:1216

SUSE-SU-2016:1248-1

SUSE-SU-2016:1250-1

SUSE-SU-2016:1299-1

SUSE-SU-2016:1300-1

SUSE-SU-2016:1303-1

SUSE-SU-2016:1378-1

SUSE-SU-2016:1379-1

SUSE-SU-2016:1458-1

SUSE-SU-2016:1475-1

USN-2963-1

USN-2964-1

USN-2972-1

Affected Products

Centos

Ibm Aix

Java Platform

Java Se

Java Se Embedded

Red Hat

Suse

Ubuntu

References · 418

• http://ubuntu.com/usn/USN-2964-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-2964-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-0687 · Security Note
• https://osv.dev/vulnerability/MGASA-2016-0149 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:1250-1 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2016-0716.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00061.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00042.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-0687 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00067.html · Vendor Advisory
• http://oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2016:1430 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2016-0702.html · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-0687 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10197-1 · Vendor Advisory