CVE-2016-3550 - Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92 and Java SE Embedded 8u91 allows

CVE-2016-3550

Summary

Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality via vectors related to Hotspot.

References

Vulnerable Configurations

cpe:2.3:o:oracle:linux:5.0:*:*:*:*:*:*:*
cpe:2.3:o:oracle:linux:5.0:*:*:*:*:*:*:*
cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*
cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*
cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*
cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.8.0:update91:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.8.0:update91:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.8.0:update92:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.8.0:update92:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.7.0:update101:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.7.0:update101:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.6.0:update115:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.6.0:update115:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.6.0:update115:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.6.0:update115:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.8.0:update92:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.8.0:update92:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.7.0:update101:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.7.0:update101:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.8.0:update91:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.8.0:update91:*:*:*:*:*:*

CVSS

Base:	4.3 (as of 13-05-2022 - 14:57)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	NONE	NONE

cvss-vector via4

AV:N/AC:M/Au:N/C:P/I:N/A:N

redhat via4

advisories

bugzilla

id	1358169
title	CVE-2016-3503 Oracle JDK: unspecified vulnerability fixed in 6u121, 7u111, and 8u101 (Install)

oval

comment Red Hat Enterprise Linux must be installed
oval oval:com.redhat.rhba:tst:20070304026

AND

comment Red Hat Enterprise Linux 5 is installed
oval oval:com.redhat.rhba:tst:20070331005

AND

comment java-1.6.0-sun is earlier than 1:1.6.0.121-1jpp.1.el5_11
oval oval:com.redhat.rhsa:tst:20161477001
comment java-1.6.0-sun is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20140414002

AND

comment java-1.6.0-sun-demo is earlier than 1:1.6.0.121-1jpp.1.el5_11
oval oval:com.redhat.rhsa:tst:20161477003
comment java-1.6.0-sun-demo is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20140414004

AND

comment java-1.6.0-sun-devel is earlier than 1:1.6.0.121-1jpp.1.el5_11
oval oval:com.redhat.rhsa:tst:20161477005
comment java-1.6.0-sun-devel is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20140414006

AND

comment java-1.6.0-sun-jdbc is earlier than 1:1.6.0.121-1jpp.1.el5_11
oval oval:com.redhat.rhsa:tst:20161477007
comment java-1.6.0-sun-jdbc is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20140414008

AND

comment java-1.6.0-sun-plugin is earlier than 1:1.6.0.121-1jpp.1.el5_11
oval oval:com.redhat.rhsa:tst:20161477009
comment java-1.6.0-sun-plugin is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20140414010

AND

comment java-1.6.0-sun-src is earlier than 1:1.6.0.121-1jpp.1.el5_11
oval oval:com.redhat.rhsa:tst:20161477011
comment java-1.6.0-sun-src is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20140414012

AND

comment Red Hat Enterprise Linux 7 is installed
oval oval:com.redhat.rhba:tst:20150364027

AND

comment java-1.6.0-sun is earlier than 1:1.6.0.121-1jpp.1.el7
oval oval:com.redhat.rhsa:tst:20161477014
comment java-1.6.0-sun is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140414015

AND

comment java-1.6.0-sun-demo is earlier than 1:1.6.0.121-1jpp.1.el7
oval oval:com.redhat.rhsa:tst:20161477016
comment java-1.6.0-sun-demo is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140414017

AND

comment java-1.6.0-sun-devel is earlier than 1:1.6.0.121-1jpp.1.el7
oval oval:com.redhat.rhsa:tst:20161477018
comment java-1.6.0-sun-devel is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140414019

AND

comment java-1.6.0-sun-jdbc is earlier than 1:1.6.0.121-1jpp.1.el7
oval oval:com.redhat.rhsa:tst:20161477020
comment java-1.6.0-sun-jdbc is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140414021

AND

comment java-1.6.0-sun-plugin is earlier than 1:1.6.0.121-1jpp.1.el7
oval oval:com.redhat.rhsa:tst:20161477022
comment java-1.6.0-sun-plugin is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140414023

AND

comment java-1.6.0-sun-src is earlier than 1:1.6.0.121-1jpp.1.el7
oval oval:com.redhat.rhsa:tst:20161477024
comment java-1.6.0-sun-src is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140414025

AND

comment Red Hat Enterprise Linux 6 is installed
oval oval:com.redhat.rhba:tst:20111656003

AND

comment java-1.6.0-sun is earlier than 1:1.6.0.121-1jpp.1.el6_8
oval oval:com.redhat.rhsa:tst:20161477027
comment java-1.6.0-sun is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140414015

AND

comment java-1.6.0-sun-demo is earlier than 1:1.6.0.121-1jpp.1.el6_8
oval oval:com.redhat.rhsa:tst:20161477028
comment java-1.6.0-sun-demo is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140414017

AND

comment java-1.6.0-sun-devel is earlier than 1:1.6.0.121-1jpp.1.el6_8
oval oval:com.redhat.rhsa:tst:20161477029
comment java-1.6.0-sun-devel is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140414019

AND

comment java-1.6.0-sun-jdbc is earlier than 1:1.6.0.121-1jpp.1.el6_8
oval oval:com.redhat.rhsa:tst:20161477030
comment java-1.6.0-sun-jdbc is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140414021

AND

comment java-1.6.0-sun-plugin is earlier than 1:1.6.0.121-1jpp.1.el6_8
oval oval:com.redhat.rhsa:tst:20161477031
comment java-1.6.0-sun-plugin is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140414023

AND

comment java-1.6.0-sun-src is earlier than 1:1.6.0.121-1jpp.1.el6_8
oval oval:com.redhat.rhsa:tst:20161477032
comment java-1.6.0-sun-src is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140414025

rhsa

id	RHSA-2016:1477
released	2016-07-21
severity	Moderate
title	RHSA-2016:1477: java-1.6.0-sun security update (Moderate)

rhsa
id RHSA-2016:1458
rhsa
id RHSA-2016:1475
rhsa
id RHSA-2016:1476
rhsa
id RHSA-2016:1504
rhsa
id RHSA-2016:1776

rpms

java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8
java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2
java-1.8.0-openjdk-accessibility-1:1.8.0.101-3.b13.el7_2
java-1.8.0-openjdk-accessibility-debug-1:1.8.0.101-3.b13.el7_2
java-1.8.0-openjdk-debug-1:1.8.0.101-3.b13.el6_8
java-1.8.0-openjdk-debug-1:1.8.0.101-3.b13.el7_2
java-1.8.0-openjdk-debuginfo-1:1.8.0.101-3.b13.el6_8
java-1.8.0-openjdk-debuginfo-1:1.8.0.101-3.b13.el7_2
java-1.8.0-openjdk-demo-1:1.8.0.101-3.b13.el6_8
java-1.8.0-openjdk-demo-1:1.8.0.101-3.b13.el7_2
java-1.8.0-openjdk-demo-debug-1:1.8.0.101-3.b13.el6_8
java-1.8.0-openjdk-demo-debug-1:1.8.0.101-3.b13.el7_2
java-1.8.0-openjdk-devel-1:1.8.0.101-3.b13.el6_8
java-1.8.0-openjdk-devel-1:1.8.0.101-3.b13.el7_2
java-1.8.0-openjdk-devel-debug-1:1.8.0.101-3.b13.el6_8
java-1.8.0-openjdk-devel-debug-1:1.8.0.101-3.b13.el7_2
java-1.8.0-openjdk-headless-1:1.8.0.101-3.b13.el6_8
java-1.8.0-openjdk-headless-1:1.8.0.101-3.b13.el7_2
java-1.8.0-openjdk-headless-debug-1:1.8.0.101-3.b13.el6_8
java-1.8.0-openjdk-headless-debug-1:1.8.0.101-3.b13.el7_2
java-1.8.0-openjdk-javadoc-1:1.8.0.101-3.b13.el6_8
java-1.8.0-openjdk-javadoc-1:1.8.0.101-3.b13.el7_2
java-1.8.0-openjdk-javadoc-debug-1:1.8.0.101-3.b13.el6_8
java-1.8.0-openjdk-javadoc-debug-1:1.8.0.101-3.b13.el7_2
java-1.8.0-openjdk-src-1:1.8.0.101-3.b13.el6_8
java-1.8.0-openjdk-src-1:1.8.0.101-3.b13.el7_2
java-1.8.0-openjdk-src-debug-1:1.8.0.101-3.b13.el6_8
java-1.8.0-openjdk-src-debug-1:1.8.0.101-3.b13.el7_2
java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8
java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7
java-1.8.0-oracle-devel-1:1.8.0.101-1jpp.1.el6_8
java-1.8.0-oracle-devel-1:1.8.0.101-1jpp.1.el7
java-1.8.0-oracle-javafx-1:1.8.0.101-1jpp.1.el6_8
java-1.8.0-oracle-javafx-1:1.8.0.101-1jpp.1.el7
java-1.8.0-oracle-jdbc-1:1.8.0.101-1jpp.1.el6_8
java-1.8.0-oracle-jdbc-1:1.8.0.101-1jpp.1.el7
java-1.8.0-oracle-plugin-1:1.8.0.101-1jpp.1.el6_8
java-1.8.0-oracle-plugin-1:1.8.0.101-1jpp.1.el7
java-1.8.0-oracle-src-1:1.8.0.101-1jpp.1.el6_8
java-1.8.0-oracle-src-1:1.8.0.101-1jpp.1.el7
java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el5_11
java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el6_8
java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el7
java-1.7.0-oracle-devel-1:1.7.0.111-1jpp.1.el5_11
java-1.7.0-oracle-devel-1:1.7.0.111-1jpp.1.el6_8
java-1.7.0-oracle-devel-1:1.7.0.111-1jpp.1.el7
java-1.7.0-oracle-javafx-1:1.7.0.111-1jpp.1.el5_11
java-1.7.0-oracle-javafx-1:1.7.0.111-1jpp.1.el6_8
java-1.7.0-oracle-javafx-1:1.7.0.111-1jpp.1.el7
java-1.7.0-oracle-jdbc-1:1.7.0.111-1jpp.1.el5_11
java-1.7.0-oracle-jdbc-1:1.7.0.111-1jpp.1.el6_8
java-1.7.0-oracle-jdbc-1:1.7.0.111-1jpp.1.el7
java-1.7.0-oracle-plugin-1:1.7.0.111-1jpp.1.el5_11
java-1.7.0-oracle-plugin-1:1.7.0.111-1jpp.1.el6_8
java-1.7.0-oracle-plugin-1:1.7.0.111-1jpp.1.el7
java-1.7.0-oracle-src-1:1.7.0.111-1jpp.1.el5_11
java-1.7.0-oracle-src-1:1.7.0.111-1jpp.1.el6_8
java-1.7.0-oracle-src-1:1.7.0.111-1jpp.1.el7
java-1.6.0-sun-1:1.6.0.121-1jpp.1.el5_11
java-1.6.0-sun-1:1.6.0.121-1jpp.1.el6_8
java-1.6.0-sun-1:1.6.0.121-1jpp.1.el7
java-1.6.0-sun-demo-1:1.6.0.121-1jpp.1.el5_11
java-1.6.0-sun-demo-1:1.6.0.121-1jpp.1.el6_8
java-1.6.0-sun-demo-1:1.6.0.121-1jpp.1.el7
java-1.6.0-sun-devel-1:1.6.0.121-1jpp.1.el5_11
java-1.6.0-sun-devel-1:1.6.0.121-1jpp.1.el6_8
java-1.6.0-sun-devel-1:1.6.0.121-1jpp.1.el7
java-1.6.0-sun-jdbc-1:1.6.0.121-1jpp.1.el5_11
java-1.6.0-sun-jdbc-1:1.6.0.121-1jpp.1.el6_8
java-1.6.0-sun-jdbc-1:1.6.0.121-1jpp.1.el7
java-1.6.0-sun-plugin-1:1.6.0.121-1jpp.1.el5_11
java-1.6.0-sun-plugin-1:1.6.0.121-1jpp.1.el6_8
java-1.6.0-sun-plugin-1:1.6.0.121-1jpp.1.el7
java-1.6.0-sun-src-1:1.6.0.121-1jpp.1.el5_11
java-1.6.0-sun-src-1:1.6.0.121-1jpp.1.el6_8
java-1.6.0-sun-src-1:1.6.0.121-1jpp.1.el7
java-1.7.0-openjdk-1:1.7.0.111-2.6.7.1.el5_11
java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el6_8
java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el7_2
java-1.7.0-openjdk-accessibility-1:1.7.0.111-2.6.7.2.el7_2
java-1.7.0-openjdk-debuginfo-1:1.7.0.111-2.6.7.1.el5_11
java-1.7.0-openjdk-debuginfo-1:1.7.0.111-2.6.7.2.el6_8
java-1.7.0-openjdk-debuginfo-1:1.7.0.111-2.6.7.2.el7_2
java-1.7.0-openjdk-demo-1:1.7.0.111-2.6.7.1.el5_11
java-1.7.0-openjdk-demo-1:1.7.0.111-2.6.7.2.el6_8
java-1.7.0-openjdk-demo-1:1.7.0.111-2.6.7.2.el7_2
java-1.7.0-openjdk-devel-1:1.7.0.111-2.6.7.1.el5_11
java-1.7.0-openjdk-devel-1:1.7.0.111-2.6.7.2.el6_8
java-1.7.0-openjdk-devel-1:1.7.0.111-2.6.7.2.el7_2
java-1.7.0-openjdk-headless-1:1.7.0.111-2.6.7.2.el7_2
java-1.7.0-openjdk-javadoc-1:1.7.0.111-2.6.7.1.el5_11
java-1.7.0-openjdk-javadoc-1:1.7.0.111-2.6.7.2.el6_8
java-1.7.0-openjdk-javadoc-1:1.7.0.111-2.6.7.2.el7_2
java-1.7.0-openjdk-src-1:1.7.0.111-2.6.7.1.el5_11
java-1.7.0-openjdk-src-1:1.7.0.111-2.6.7.2.el6_8
java-1.7.0-openjdk-src-1:1.7.0.111-2.6.7.2.el7_2
java-1.6.0-openjdk-1:1.6.0.40-1.13.12.4.el5_11
java-1.6.0-openjdk-1:1.6.0.40-1.13.12.5.el7_2
java-1.6.0-openjdk-1:1.6.0.40-1.13.12.6.el6_8
java-1.6.0-openjdk-debuginfo-1:1.6.0.40-1.13.12.4.el5_11
java-1.6.0-openjdk-debuginfo-1:1.6.0.40-1.13.12.5.el7_2
java-1.6.0-openjdk-debuginfo-1:1.6.0.40-1.13.12.6.el6_8
java-1.6.0-openjdk-demo-1:1.6.0.40-1.13.12.4.el5_11
java-1.6.0-openjdk-demo-1:1.6.0.40-1.13.12.5.el7_2
java-1.6.0-openjdk-demo-1:1.6.0.40-1.13.12.6.el6_8
java-1.6.0-openjdk-devel-1:1.6.0.40-1.13.12.4.el5_11
java-1.6.0-openjdk-devel-1:1.6.0.40-1.13.12.5.el7_2
java-1.6.0-openjdk-devel-1:1.6.0.40-1.13.12.6.el6_8
java-1.6.0-openjdk-javadoc-1:1.6.0.40-1.13.12.4.el5_11
java-1.6.0-openjdk-javadoc-1:1.6.0.40-1.13.12.5.el7_2
java-1.6.0-openjdk-javadoc-1:1.6.0.40-1.13.12.6.el6_8
java-1.6.0-openjdk-src-1:1.6.0.40-1.13.12.4.el5_11
java-1.6.0-openjdk-src-1:1.6.0.40-1.13.12.5.el7_2
java-1.6.0-openjdk-src-1:1.6.0.40-1.13.12.6.el6_8

refmap via4

bid	91787 91951
confirm	http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html https://security.netapp.com/advisory/ntap-20160721-0001/
debian	DSA-3641
gentoo	GLSA-201610-08 GLSA-201701-43
sectrack	1036365
suse	SUSE-SU-2016:1997 SUSE-SU-2016:2012 openSUSE-SU-2016:1979 openSUSE-SU-2016:2050 openSUSE-SU-2016:2051 openSUSE-SU-2016:2052 openSUSE-SU-2016:2058
ubuntu	USN-3043-1 USN-3062-1 USN-3077-1

Last major update

13-05-2022 - 14:57

Published

21-07-2016 - 10:13

Last modified

13-05-2022 - 14:57