Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect availability via vectors related to JAXP.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Aix 5.3 Java_jan2016_advisory | — | — | Aug 5, 2016 | Jan 20, 2016 |
| Aix 6.1 Java_jan2016_advisory | — | — | Aug 5, 2016 | Jan 20, 2016 |
| Aix 7.1 Java_jan2016_advisory | — | — | Aug 5, 2016 | Jan 20, 2016 |
| Aix 7.2 Java_jan2016_advisory | — | — | Aug 5, 2016 | Jan 20, 2016 |
| Azul Zulu | — | Apply legacy security update: Azul Zulu JDK 7 installer 7.13 (JDK 7u95, quarterly CPU) — Azul Legacy Production SupportUpgrade to Azul Zulu JDK 8 installer 8.12 (JDK 8u71, quarterly CPU) (LTS stream)Apply legacy security update: Azul Zulu JDK 6 installer 6.11 (JDK 6u77, quarterly CPU) — Azul Legacy Production Support | Jan 21, 2016 | Jan 21, 2016 |
| Centos_linux | — | Upgrade java-1.8.0-openjdk-headless-debugUpgrade java-1.8.0-openjdk-headlessUpgrade java-1.8.0-openjdk-demoUpgrade java-1.8.0-openjdk-develUpgrade java-1.7.0-openjdk-demoUpgrade java-1.8.0-openjdkUpgrade java-1.7.0-openjdk-javadocUpgrade java-1.7.0-openjdkUpgrade java-1.8.0-openjdk-debugUpgrade java-1.6.0-openjdk-javadocUpgrade java-1.6.0-openjdk-develUpgrade java-1.8.0-openjdk-demo-debugUpgrade java-1.7.0-openjdk-accessibilityUpgrade java-1.6.0-openjdk-demoUpgrade java-1.7.0-openjdk-headlessUpgrade java-1.8.0-openjdk-devel-debugUpgrade java-1.8.0-openjdk-accessibilityUpgrade java-1.8.0-openjdk-javadoc-debugUpgrade java-1.8.0-openjdk-srcUpgrade java-1.6.0-openjdkUpgrade java-1.7.0-openjdk-develUpgrade java-1.7.0-openjdk-srcUpgrade java-1.8.0-openjdk-accessibility-debugUpgrade java-1.8.0-openjdk-javadocUpgrade java-1.8.0-openjdk-src-debugUpgrade java-1.6.0-openjdk-src | Jul 6, 2016 | Jan 20, 2016 |
| Debian | — | Upgrade openjdk-7Upgrade openjdk-8Upgrade openjdk-6 | Feb 2, 2016 | Jan 20, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Apr 5, 2016 |
| Gentoo Linux | — | Upgrade dev-java/oracle-jdk-bin.Upgrade dev-java/oracle-jre-bin.Upgrade dev-java/icedtea.Upgrade dev-java/icedtea-bin. | Oct 30, 2017 | Jan 20, 2016 |
| Ibm Aix | — | Apply the fix or workaround for java_jan2016_advisory | Nov 30, 2017 | Jan 20, 2016 |
| Ibm Java | — | Upgrade IBM Java to version 6.0.16.20Upgrade IBM Java to version 7.0.9.30Upgrade IBM Java to version 7.1.3.30Upgrade IBM Java to version 8.0.2.10Upgrade IBM Java to version 6.1.8.20 | Oct 5, 2018 | Jan 21, 2016 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Apr 27, 2018 | Jan 21, 2016 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Jan 19, 2016 | Jan 19, 2016 |
| Oracle_linux | — | Upgrade java-1.7.0-openjdk-headlessUpgrade java-1.8.0-openjdk-accessibilityUpgrade java-1.8.0-openjdk-src-debugUpgrade java-1.8.0-openjdk-headlessUpgrade java-1.8.0-openjdk-devel-debugUpgrade java-1.8.0-openjdk-demo-debugUpgrade java-1.6.0-openjdk-demoUpgrade java-1.7.0-openjdk-develUpgrade java-1.6.0-openjdkUpgrade java-1.6.0-openjdk-srcUpgrade java-1.7.0-openjdk-accessibilityUpgrade java-1.8.0-openjdk-javadocUpgrade java-1.8.0-openjdk-headless-debugUpgrade java-1.7.0-openjdk-demoUpgrade java-1.7.0-openjdk-srcUpgrade java-1.8.0-openjdk-javadoc-debugUpgrade java-1.7.0-openjdkUpgrade java-1.8.0-openjdk-develUpgrade java-1.8.0-openjdk-debugUpgrade java-1.8.0-openjdkUpgrade java-1.6.0-openjdk-develUpgrade java-1.8.0-openjdk-accessibility-debugUpgrade java-1.8.0-openjdk-demoUpgrade java-1.8.0-openjdk-srcUpgrade java-1.7.0-openjdk-javadocUpgrade java-1.6.0-openjdk-javadoc | Oct 16, 2024 | Jan 21, 2016 |
| Suse | — | Upgrade java-1_7_0-ibm-alsaUpgrade java-1_8_0-ibm-develUpgrade java-1_8_0-openjdk-demoUpgrade java-1_7_1-ibm-pluginUpgrade java-1_7_0-ibm-jdbcUpgrade java-1_6_0-ibm-alsaUpgrade java-1_7_0-ibm-pluginUpgrade java-1_7_0-openjdk-develUpgrade java-1_7_1-ibm-jdbcUpgrade java-1_8_0-openjdk-develUpgrade java-1_7_1-ibm-develUpgrade java-1_6_0-ibm-fontsUpgrade java-1_6_0-ibm-pluginUpgrade java-1_7_0-openjdk-demoUpgrade java-1_6_0-ibm-jdbcUpgrade java-1_8_0-ibm-pluginUpgrade java-1_8_0-ibmUpgrade java-1_6_0-ibm-develUpgrade java-1_7_0-openjdkUpgrade java-1_8_0-ibm-alsaUpgrade java-1_7_1-ibmUpgrade java-1_8_0-openjdkUpgrade java-1_8_0-openjdk-headlessUpgrade java-1_7_0-openjdk-headlessUpgrade java-1_7_0-ibm-develUpgrade java-1_7_0-ibmUpgrade java-1_6_0-ibmUpgrade java-1_7_1-ibm-alsa | Feb 2, 2016 | Jan 20, 2016 |
| Ubuntu | — | Upgrade openjdk-6-jreUpgrade icedtea-6-jre-cacaoUpgrade openjdk-7-jreUpgrade openjdk-6-jre-headlessUpgrade openjdk-7-jre-zeroUpgrade openjdk-6-jre-libUpgrade openjdk-7-jre-headlessUpgrade icedtea-6-jre-jamvmUpgrade openjdk-6-jre-zeroUpgrade openjdk-7-jre-libUpgrade icedtea-7-jre-jamvm | Feb 2, 2016 | Jan 20, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub