CVE-2016-3550 — Integer Overflow or Wraparound in Oracle JDK

CWE-190 — Integer Overflow or Wraparound11 documents8 sources
Severity
4.3MEDIUMNVD
EPSS
1.9%
top 16.68%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Oracle JDKOracle JREOracle Linux
Timeline
PublishedJul 21
Latest updateMay 13

Description

Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality via vectors related to Hotspot.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages3 packages

▶NVDoracle/jdk1.6.0, 1.7.0, 1.8.0+2
▶NVDoracle/jre1.6.0, 1.7.0, 1.8.0+2
▶NVDoracle/linux5.0, 6, 7+2

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-hmj3-cm5q-2jpw: Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality via vec↗2022-05-13
▶
CVEList
CVE-2016-3550: Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality via vec↗2016-07-21
▶
OSV
CVE-2016-3550: Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality via vec↗2016-07-21
▶

📋Vendor Advisories

5
Ubuntu
OpenJDK 6 vulnerabilities↗2016-09-12
▶
Ubuntu
OpenJDK 7 vulnerabilities↗2016-08-16
▶
Ubuntu
OpenJDK 8 vulnerabilities↗2016-07-27
▶
Red Hat
OpenJDK: integer overflows in bytecode streams (Hotspot, 8152479)↗2016-07-19
▶
Debian
CVE-2016-3550: openjdk-8 - Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92 and Java SE E...↗2016
▶

💬Community

1
Bugzilla
CVE-2016-3550 OpenJDK: integer overflows in bytecode streams (Hotspot, 8152479)↗2016-07-18
▶
CVE-2016-3550 — Integer Overflow or Wraparound | cvebase