Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot, a different vulnerability than CVE-2016-5573.
CVSS Details
- CVSS 3.1 Base Score: 9.6
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openjdk8 | Nov 8, 2019 | Oct 25, 2016 |
| Amazon_linux | — | Upgrade java-1.6.0-openjdkUpgrade java-1.7.0-openjdkUpgrade java-1.8.0-openjdk | Oct 28, 2016 | Oct 25, 2016 |
| Azul Zulu | — | Upgrade to Azul Zulu JDK 8 installer 8.18 (JDK 8u111, quarterly CPU) (LTS stream)Apply legacy security update: Azul Zulu JDK 6 installer 6.14 (JDK 6u87, quarterly CPU) — Azul Legacy Production SupportApply legacy security update: Azul Zulu JDK 7 installer 7.16 (JDK 7u121, quarterly CPU) — Azul Legacy Production Support | Oct 25, 2016 | Oct 25, 2016 |
| Centos_linux | — | Upgrade java-1.6.0-openjdkUpgrade java-1.6.0-openjdk-srcUpgrade java-1.6.0-openjdk-debuginfoUpgrade java-1.6.0-openjdk-develUpgrade java-1.6.0-openjdk-demoUpgrade java-1.6.0-openjdk-javadoc | Oct 25, 2016 | Oct 25, 2016 |
| Debian | — | Upgrade openjdk-8Upgrade openjdk-7 | Nov 7, 2016 | Oct 25, 2016 |
| Gentoo Linux | — | Upgrade dev-java/icedtea-bin.Upgrade dev-java/oracle-jdk-bin.Upgrade dev-java/oracle-jre-bin. | Oct 30, 2017 | Oct 25, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade java-1.7.0-openjdk-develUpgrade java-1.7.0-openjdkUpgrade java-1.7.0-openjdk-headless | Nov 30, 2017 | Oct 25, 2016 |
| Ibm Aix | — | Apply the fix or workaround for java_oct2016_advisory | Nov 30, 2017 | Oct 25, 2016 |
| Ibm Java | — | Upgrade IBM Java to version 8.0.3.20Upgrade IBM Java to version 6.1.8.35Upgrade IBM Java to version 6.0.16.35Upgrade IBM Java to version 7.0.9.60Upgrade IBM Java to version 7.1.3.60 | Oct 5, 2018 | Oct 25, 2016 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Oct 20, 2016 | Oct 20, 2016 |
| Oracle_linux | — | Upgrade java-1.8.0-openjdk-headless-debugUpgrade java-1.8.0-openjdk-src-debugUpgrade java-1.8.0-openjdk-debugUpgrade java-1.7.0-openjdk-headlessUpgrade java-1.8.0-openjdk-javadocUpgrade java-1.8.0-openjdk-headlessUpgrade java-1.8.0-openjdk-javadoc-debugUpgrade java-1.8.0-openjdk-demo-debugUpgrade java-1.8.0-openjdk-accessibilityUpgrade java-1.7.0-openjdk-accessibilityUpgrade java-1.6.0-openjdk-demoUpgrade java-1.7.0-openjdk-develUpgrade java-1.8.0-openjdk-develUpgrade java-1.6.0-openjdkUpgrade java-1.7.0-openjdk-demoUpgrade java-1.8.0-openjdkUpgrade java-1.7.0-openjdk-srcUpgrade java-1.6.0-openjdk-develUpgrade java-1.8.0-openjdk-devel-debug | Oct 25, 2016 | Oct 18, 2016 |
| Redhat_linux | — | Upgrade java-1.6.0-openjdk-srcUpgrade java-1.6.0-openjdk-demoUpgrade java-1.6.0-openjdkUpgrade java-1.6.0-openjdk-develUpgrade java-1.6.0-openjdk-debuginfoUpgrade java-1.6.0-openjdk-javadoc | Oct 25, 2016 | Oct 25, 2016 |
| Suse | — | Upgrade java-1_8_0-openjdk-develUpgrade java-1_7_0-openjdkUpgrade java-1_7_0-openjdk-develUpgrade java-1_8_0-openjdkUpgrade java-1_7_0-openjdk-demoUpgrade java-1_8_0-openjdk-demoUpgrade java-1_8_0-openjdk-headlessUpgrade java-1_7_0-openjdk-headless | Nov 19, 2016 | Oct 25, 2016 |
| Ubuntu | — | Upgrade openjdk-7-jre-headlessUpgrade openjdk-6-jreUpgrade openjdk-8-jdkUpgrade openjdk-7-jreUpgrade icedtea-7-jre-jamvmUpgrade openjdk-8-jre-jamvmUpgrade icedtea-6-jre-cacaoUpgrade openjdk-6-jre-headlessUpgrade openjdk-7-jre-zeroUpgrade openjdk-6-jre-libUpgrade openjdk-8-jre-headlessUpgrade openjdk-8-jreUpgrade openjdk-6-jdkUpgrade icedtea-6-jre-jamvmUpgrade openjdk-8-jre-zeroUpgrade openjdk-7-jre-libUpgrade openjdk-8-jdk-headless | Nov 3, 2016 | Oct 25, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub