CVE-2016-0466 — Oracle JDK vulnerability

10 documents8 sources
Severity
5.0MEDIUMNVD
OSV5.9
EPSS
5.0%
top 10.29%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Canonical Ubuntu LinuxOracle JDKOracle JRE
Timeline
PublishedJan 21
Latest updateMay 13

Description

Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect availability via vectors related to JAXP.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages2 packages

▶NVDoracle/jdk1.6.0, 1.7.0, 1.8.0+2
▶NVDoracle/jre1.6.0, 1.7.0, 1.8.0+2

Also affects: Ubuntu Linux 12.04, 14.04, 15.04, 15.10

🔴Vulnerability Details

4
GHSA
GHSA-v75m-88cc-6483: Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and↗2022-05-13
▶
OSV
openjdk-7 vulnerabilities↗2016-02-01
▶
CVEList
CVE-2016-0466: Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and↗2016-01-21
▶
OSV
CVE-2016-0466: Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and↗2016-01-20
▶

📋Vendor Advisories

4
Ubuntu
OpenJDK 7 vulnerabilities↗2016-02-01
▶
Ubuntu
OpenJDK 6 vulnerabilities↗2016-02-01
▶
Red Hat
OpenJDK: insufficient enforcement of totalEntitySizeLimit (JAXP, 8133962)↗2016-01-19
▶
Debian
CVE-2016-0466: openjdk-8 - Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit componen...↗2016
▶

💬Community

1
Bugzilla
CVE-2016-0466 OpenJDK: insufficient enforcement of totalEntitySizeLimit (JAXP, 8133962)↗2016-01-18
▶
CVE-2016-0466 — Oracle JDK vulnerability | cvebase