CVE-2016-3610

published 2016-07-21

CVE-2016-3610: Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via…

critical 9.6 CVSS 3.0

AV N AC L PR N UI R S C C H I H A H

Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Libraries, a different vulnerability than CVE-2016-3598.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
debian	openjdk-8	< openjdk-8 8u102-b14-1 (sid)	openjdk-8 8u102-b14-1 (sid)
oracle	jdk	—	—
oracle	jre	—	—
oracle	linux	—	—
oracle	linux	—	—
oracle	linux	—	—

CVSS provenance

nvd v3.0 9.6 CRITICAL CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

osv 9.6 CRITICAL