CVE-2016-0402 — Oracle JDK vulnerability

10 documents8 sources
Severity
5.0MEDIUMNVD
OSV5.9
EPSS
3.3%
top 12.81%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Canonical Ubuntu LinuxOracle JDKOracle JRE
Timeline
PublishedJan 21
Latest updateMay 13

Description

Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect integrity via unknown vectors related to Networking.

CVSS vector

AV:N/AC:L/C:N/I:P/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages2 packages

▶NVDoracle/jdk1.6.0, 1.7.0, 1.8.0+2
▶NVDoracle/jre1.6.0, 1.7.0, 1.8.0+2

Also affects: Ubuntu Linux 12.04, 14.04, 15.04, 15.10

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

4
GHSA
GHSA-hfgr-56jc-3hcm: Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remo↗2022-05-13
▶
OSV
openjdk-7 vulnerabilities↗2016-02-01
▶
CVEList
CVE-2016-0402: Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remo↗2016-01-21
▶
OSV
CVE-2016-0402: Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remo↗2016-01-20
▶

📋Vendor Advisories

4
Ubuntu
OpenJDK 7 vulnerabilities↗2016-02-01
▶
Ubuntu
OpenJDK 6 vulnerabilities↗2016-02-01
▶
Red Hat
OpenJDK: URL deserialization inconsistencies (Networking, 8059054)↗2016-01-19
▶
Debian
CVE-2016-0402: openjdk-8 - Unspecified vulnerability in the Java SE and Java SE Embedded components in Orac...↗2016
▶

💬Community

1
Bugzilla
CVE-2016-0402 OpenJDK: URL deserialization inconsistencies (Networking, 8059054)↗2016-01-15
▶
CVE-2016-0402 — Oracle JDK vulnerability | cvebase