kritisch
CVE-2016-0687
OpenJDK: insufficient byte type checks (Hotspot, 8132051)
In der Trivy Database seit spätestens 24. Okt. 2026, 07:11 UTCWann der Eintrag vor diesem Build hinzukam, ist nicht erfasst.
Einstufung nach Quelle
NVD9.6CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Red Hat6.8AV:N/AC:M/Au:N/C:P/I:P/A:P
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD, Red Hat, Amazon, Oracle. Niedriger laut Ubuntu (mittel).
Beschreibung
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 and Java SE Embedded 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to the Hotspot sub-component.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| amazon linux 1 | java-1.6.0-openjdk, java-1.6.0-openjdk-debuginfo, java-1.6.0-openjdk-demo und 16 weitere | 1:1.6.0.39-1.13.11.1.74.amzn1 und 2 weitere |
| Oracle Linux 5 | java-1.6.0-openjdk, java-1.6.0-openjdk-demo, java-1.6.0-openjdk-devel und 7 weitere | 1:1.6.0.39-1.13.11.0.0.1.el5_11 und 1 weitere |
| Oracle Linux 6 | java-1.6.0-openjdk, java-1.6.0-openjdk-demo, java-1.6.0-openjdk-devel und 19 weitere | 1:1.6.0.39-1.13.11.0.el6_7 und 2 weitere |
| Oracle Linux 7 | java-1.6.0-openjdk, java-1.6.0-openjdk-demo, java-1.6.0-openjdk-devel und 23 weitere | 1:1.6.0.39-1.13.11.0.el7_2 und 2 weitere |
| chainguard | openjdk-11-openj9, openjdk-17-openj9, openjdk-21-openj9 und 3 weitere | 0.53.0-r0 und 2 weitere |
| debian 7 | openjdk-6, openjdk-7 | 7u101-2.6.6-2~deb7u1 |
| debian 8 | openjdk-7 | 7u101-2.6.6-1~deb8u1 |
| ubuntu 12.04 | openjdk-6, openjdk-7 | 6b39-1.13.11-0ubuntu0.12.04.1 und 1 weitere |
| ubuntu 14.04 | openjdk-6, openjdk-7 | 6b39-1.13.11-0ubuntu0.14.04.1 und 1 weitere |
| ubuntu 15.10 | openjdk-6, openjdk-7, openjdk-8 | 6b39-1.13.11-0ubuntu0.15.10.2 und 2 weitere |
| ubuntu 16.04 | openjdk-8 | 8u91-b14-0ubuntu4~16.04.1 |
| ubuntu 16.04-ESM | openjdk-8 | 8u91-b14-0ubuntu4~16.04.1 |
Alle 95 Einträge aus 12 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| amazon linux 1 | java-1.6.0-openjdk | 1:1.6.0.39-1.13.11.1.74.amzn1 |
| amazon linux 1 | java-1.6.0-openjdk-debuginfo | 1:1.6.0.39-1.13.11.1.74.amzn1 |
| amazon linux 1 | java-1.6.0-openjdk-demo | 1:1.6.0.39-1.13.11.1.74.amzn1 |
| amazon linux 1 | java-1.6.0-openjdk-devel | 1:1.6.0.39-1.13.11.1.74.amzn1 |
| amazon linux 1 | java-1.6.0-openjdk-javadoc | 1:1.6.0.39-1.13.11.1.74.amzn1 |
| amazon linux 1 | java-1.6.0-openjdk-src | 1:1.6.0.39-1.13.11.1.74.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk | 1:1.7.0.101-2.6.6.1.67.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk-debuginfo | 1:1.7.0.101-2.6.6.1.67.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk-demo | 1:1.7.0.101-2.6.6.1.67.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk-devel | 1:1.7.0.101-2.6.6.1.67.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk-javadoc | 1:1.7.0.101-2.6.6.1.67.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk-src | 1:1.7.0.101-2.6.6.1.67.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk | 1:1.8.0.91-0.b14.10.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-debuginfo | 1:1.8.0.91-0.b14.10.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-demo | 1:1.8.0.91-0.b14.10.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-devel | 1:1.8.0.91-0.b14.10.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-headless | 1:1.8.0.91-0.b14.10.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-javadoc | 1:1.8.0.91-0.b14.10.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-src | 1:1.8.0.91-0.b14.10.amzn1 |
| Oracle Linux 5 | java-1.6.0-openjdk | 1:1.6.0.39-1.13.11.0.0.1.el5_11 |
| Oracle Linux 5 | java-1.6.0-openjdk-demo | 1:1.6.0.39-1.13.11.0.0.1.el5_11 |
| Oracle Linux 5 | java-1.6.0-openjdk-devel | 1:1.6.0.39-1.13.11.0.0.1.el5_11 |
| Oracle Linux 5 | java-1.6.0-openjdk-javadoc | 1:1.6.0.39-1.13.11.0.0.1.el5_11 |
| Oracle Linux 5 | java-1.6.0-openjdk-src | 1:1.6.0.39-1.13.11.0.0.1.el5_11 |
| Oracle Linux 5 | java-1.7.0-openjdk | 1:1.7.0.101-2.6.6.1.0.1.el5_11 |
| Oracle Linux 5 | java-1.7.0-openjdk-demo | 1:1.7.0.101-2.6.6.1.0.1.el5_11 |
| Oracle Linux 5 | java-1.7.0-openjdk-devel | 1:1.7.0.101-2.6.6.1.0.1.el5_11 |
| Oracle Linux 5 | java-1.7.0-openjdk-javadoc | 1:1.7.0.101-2.6.6.1.0.1.el5_11 |
| Oracle Linux 5 | java-1.7.0-openjdk-src | 1:1.7.0.101-2.6.6.1.0.1.el5_11 |
| Oracle Linux 6 | java-1.6.0-openjdk | 1:1.6.0.39-1.13.11.0.el6_7 |
| Oracle Linux 6 | java-1.6.0-openjdk-demo | 1:1.6.0.39-1.13.11.0.el6_7 |
| Oracle Linux 6 | java-1.6.0-openjdk-devel | 1:1.6.0.39-1.13.11.0.el6_7 |
| Oracle Linux 6 | java-1.6.0-openjdk-javadoc | 1:1.6.0.39-1.13.11.0.el6_7 |
| Oracle Linux 6 | java-1.6.0-openjdk-src | 1:1.6.0.39-1.13.11.0.el6_7 |
| Oracle Linux 6 | java-1.7.0-openjdk | 1:1.7.0.101-2.6.6.1.0.1.el6_7 |
| Oracle Linux 6 | java-1.7.0-openjdk-demo | 1:1.7.0.101-2.6.6.1.0.1.el6_7 |
| Oracle Linux 6 | java-1.7.0-openjdk-devel | 1:1.7.0.101-2.6.6.1.0.1.el6_7 |
| Oracle Linux 6 | java-1.7.0-openjdk-javadoc | 1:1.7.0.101-2.6.6.1.0.1.el6_7 |
| Oracle Linux 6 | java-1.7.0-openjdk-src | 1:1.7.0.101-2.6.6.1.0.1.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk-debug | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk-demo | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk-demo-debug | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk-devel | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk-devel-debug | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk-headless | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk-headless-debug | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk-javadoc | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk-javadoc-debug | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk-src | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk-src-debug | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 7 | java-1.6.0-openjdk | 1:1.6.0.39-1.13.11.0.el7_2 |
| Oracle Linux 7 | java-1.6.0-openjdk-demo | 1:1.6.0.39-1.13.11.0.el7_2 |
| Oracle Linux 7 | java-1.6.0-openjdk-devel | 1:1.6.0.39-1.13.11.0.el7_2 |
| Oracle Linux 7 | java-1.6.0-openjdk-javadoc | 1:1.6.0.39-1.13.11.0.el7_2 |
| Oracle Linux 7 | java-1.6.0-openjdk-src | 1:1.6.0.39-1.13.11.0.el7_2 |
| Oracle Linux 7 | java-1.7.0-openjdk | 1:1.7.0.101-2.6.6.1.0.1.el7_2 |
| Oracle Linux 7 | java-1.7.0-openjdk-accessibility | 1:1.7.0.101-2.6.6.1.0.1.el7_2 |
| Oracle Linux 7 | java-1.7.0-openjdk-demo | 1:1.7.0.101-2.6.6.1.0.1.el7_2 |
| Oracle Linux 7 | java-1.7.0-openjdk-devel | 1:1.7.0.101-2.6.6.1.0.1.el7_2 |
| Oracle Linux 7 | java-1.7.0-openjdk-headless | 1:1.7.0.101-2.6.6.1.0.1.el7_2 |
| Oracle Linux 7 | java-1.7.0-openjdk-javadoc | 1:1.7.0.101-2.6.6.1.0.1.el7_2 |
| Oracle Linux 7 | java-1.7.0-openjdk-src | 1:1.7.0.101-2.6.6.1.0.1.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-accessibility | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-accessibility-debug | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-debug | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-demo | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-demo-debug | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-devel | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-devel-debug | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-headless | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-headless-debug | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-javadoc | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-javadoc-debug | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-src | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-src-debug | 1:1.8.0.91-0.b14.el7_2 |
| chainguard | openjdk-11-openj9 | 0.53.0-r0 |
| chainguard | openjdk-17-openj9 | 0.53.0-r0 |
| chainguard | openjdk-21-openj9 | 0.53.0-r0 |
| chainguard | openjdk-25-openj9 | 0.59.0-r1 |
| chainguard | openjdk-26-openj9 | 0.59.0-r1 |
| chainguard | openjdk-8-openj9 | 0.53.0-r1 |
| debian 7 | openjdk-6 | kein Fix angegeben |
| debian 7 | openjdk-7 | 7u101-2.6.6-2~deb7u1 |
| debian 8 | openjdk-7 | 7u101-2.6.6-1~deb8u1 |
| ubuntu 12.04 | openjdk-6 | 6b39-1.13.11-0ubuntu0.12.04.1 |
| ubuntu 12.04 | openjdk-7 | 7u101-2.6.6-0ubuntu0.12.04.1 |
| ubuntu 14.04 | openjdk-6 | 6b39-1.13.11-0ubuntu0.14.04.1 |
| ubuntu 14.04 | openjdk-7 | 7u101-2.6.6-0ubuntu0.14.04.1 |
| ubuntu 15.10 | openjdk-6 | 6b39-1.13.11-0ubuntu0.15.10.2 |
| ubuntu 15.10 | openjdk-7 | 7u101-2.6.6-0ubuntu0.15.10.1 |
| ubuntu 15.10 | openjdk-8 | 8u91-b14-0ubuntu4~15.10.1 |
| ubuntu 16.04 | openjdk-8 | 8u91-b14-0ubuntu4~16.04.1 |
| ubuntu 16.04-ESM | openjdk-8 | 8u91-b14-0ubuntu4~16.04.1 |
Referenzen
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00009.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00012.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00022.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00026.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00039.html
Alle 49 Referenzen
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00040.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00042.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00058.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00059.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00061.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00067.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00002.html
- http://rhn.redhat.com/errata/RHSA-2016-0650.html
- http://rhn.redhat.com/errata/RHSA-2016-0651.html
- http://rhn.redhat.com/errata/RHSA-2016-0675.html
- http://rhn.redhat.com/errata/RHSA-2016-0676.html
- http://rhn.redhat.com/errata/RHSA-2016-0677.html
- http://rhn.redhat.com/errata/RHSA-2016-0678.html
- http://rhn.redhat.com/errata/RHSA-2016-0679.html
- http://rhn.redhat.com/errata/RHSA-2016-0701.html
- http://rhn.redhat.com/errata/RHSA-2016-0702.html
- http://rhn.redhat.com/errata/RHSA-2016-0708.html
- http://rhn.redhat.com/errata/RHSA-2016-0716.html
- http://rhn.redhat.com/errata/RHSA-2016-0723.html
- http://rhn.redhat.com/errata/RHSA-2016-1039.html
- http://www.debian.org/security/2016/dsa-3558
- http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
- http://www.oracle.com/technetwork/topics/security/cpuapr2016-2881694.html#AppendixJAVA
- http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
- http://www.securityfocus.com/bid/86459
- http://www.securitytracker.com/id/1035596
- http://www.ubuntu.com/usn/USN-2963-1
- http://www.ubuntu.com/usn/USN-2964-1
- http://www.ubuntu.com/usn/USN-2972-1
- https://access.redhat.com/errata/RHSA-2016:1430
- https://access.redhat.com/errata/RHSA-2017:1216
- https://access.redhat.com/security/cve/CVE-2016-0687
- https://linux.oracle.com/cve/CVE-2016-0687.html
- https://linux.oracle.com/errata/ELSA-2016-0723.html
- https://nvd.nist.gov/vuln/detail/CVE-2016-0687
- https://security.gentoo.org/glsa/201606-18
- https://security.netapp.com/advisory/ntap-20160420-0001/
- https://ubuntu.com/security/notices/USN-2963-1
- https://ubuntu.com/security/notices/USN-2964-1
- https://ubuntu.com/security/notices/USN-2972-1
- https://www.cve.org/CVERecord?id=CVE-2016-0687