Vulnerability Details CVE-2016-0636
Unspecified vulnerability in Oracle Java SE 7u97, 8u73, and 8u74 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to the Hotspot sub-component.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.123
EPSS Ranking 93.5%
CVSS Severity
CVSS v3 Score 8.1
CVSS v2 Score 9.3
References
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00008.html
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00013.html
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00035.html
- http://rhn.redhat.com/errata/RHSA-2016-0511.html
- http://rhn.redhat.com/errata/RHSA-2016-0512.html
- http://rhn.redhat.com/errata/RHSA-2016-0513.html
- http://rhn.redhat.com/errata/RHSA-2016-0514.html
- http://rhn.redhat.com/errata/RHSA-2016-0515.html
- http://rhn.redhat.com/errata/RHSA-2016-0516.html
- http://www.debian.org/security/2016/dsa-3558
- http://www.oracle.com/technetwork/topics/security/alert-cve-2016-0636-2949497.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
- http://www.securityfocus.com/bid/85376
- http://www.securitytracker.com/id/1035401
- http://www.ubuntu.com/usn/USN-2942-1
- https://security.gentoo.org/glsa/201606-18
- https://security.gentoo.org/glsa/201610-08
- https://security.netapp.com/advisory/ntap-20160328-0001/
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00008.html
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00013.html
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00035.html
- http://rhn.redhat.com/errata/RHSA-2016-0511.html
- http://rhn.redhat.com/errata/RHSA-2016-0512.html
- http://rhn.redhat.com/errata/RHSA-2016-0513.html
- http://rhn.redhat.com/errata/RHSA-2016-0514.html
- http://rhn.redhat.com/errata/RHSA-2016-0515.html
- http://rhn.redhat.com/errata/RHSA-2016-0516.html
- http://www.debian.org/security/2016/dsa-3558
- http://www.oracle.com/technetwork/topics/security/alert-cve-2016-0636-2949497.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
- http://www.securityfocus.com/bid/85376
- http://www.securitytracker.com/id/1035401
- http://www.ubuntu.com/usn/USN-2942-1
- https://security.gentoo.org/glsa/201606-18
- https://security.gentoo.org/glsa/201610-08
- https://security.netapp.com/advisory/ntap-20160328-0001/
Products affected by CVE-2016-0636
-
cpe:2.3:a:oracle:jdk:1.7.0
-
cpe:2.3:a:oracle:jdk:1.8.0
-
cpe:2.3:a:oracle:jre:1.7.0
-
cpe:2.3:a:oracle:jre:1.8.0
-
cpe:2.3:a:redhat:icedtea7:2.6.6
-
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0
-
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0
-
cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0
-
cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0
-
cpe:2.3:o:redhat:enterprise_linux_server:6.0
-
cpe:2.3:o:redhat:enterprise_linux_server:7.0
-
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0
-
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0