CVE-2016-3587 — Oracle JDK vulnerability

9 documents8 sources
Severity
9.6CRITICALNVD
OSV4.3
EPSS
6.0%
top 9.25%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Oracle JDKOracle JREOracle Linux
Timeline
PublishedJul 21
Latest updateMay 13

Description

Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:HExploitability: 2.8 | Impact: 6.0

Affected Packages3 packages

▶NVDoracle/jdk1.8.0
▶NVDoracle/jre1.8.0
▶NVDoracle/linux6, 7+1

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

4
GHSA
GHSA-778h-vxxj-rp93: Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availabil↗2022-05-13
▶
OSV
openjdk-8 vulnerabilities↗2016-07-27
▶
OSV
CVE-2016-3587: Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availabil↗2016-07-21
▶
CVEList
CVE-2016-3587: Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availabil↗2016-07-21
▶

📋Vendor Advisories

3
Ubuntu
OpenJDK 8 vulnerabilities↗2016-07-27
▶
Red Hat
OpenJDK: insufficient protection of MethodHandle.invokeBasic() (Hotspot, 8154475)↗2016-07-19
▶
Debian
CVE-2016-3587: openjdk-8 - Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allow...↗2016
▶

💬Community

1
Bugzilla
CVE-2016-3587 OpenJDK: insufficient protection of MethodHandle.invokeBasic() (Hotspot, 8154475)↗2016-07-15
▶
CVE-2016-3587 — Oracle JDK vulnerability | cvebase