kritisch
CVE-2016-3427
OpenJDK: unrestricted deserialization of authentication credentials (JMX, 8144430)
In der Trivy Database seit spätestens 24. Okt. 2026, 07:11 UTCWann der Eintrag vor diesem Build hinzukam, ist nicht erfasst.
Einstufung nach Quelle
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat6.8AV:N/AC:M/Au:N/C:P/I:P/A:P
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD, Red Hat, Amazon, Oracle. Niedriger laut Ubuntu (mittel).
Beschreibung
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| amazon linux 1 | java-1.6.0-openjdk, java-1.6.0-openjdk-debuginfo, java-1.6.0-openjdk-demo und 16 weitere | 1:1.6.0.39-1.13.11.1.74.amzn1 und 2 weitere |
| Oracle Linux 5 | java-1.6.0-openjdk, java-1.6.0-openjdk-demo, java-1.6.0-openjdk-devel und 7 weitere | 1:1.6.0.39-1.13.11.0.0.1.el5_11 und 1 weitere |
| Oracle Linux 6 | java-1.6.0-openjdk, java-1.6.0-openjdk-demo, java-1.6.0-openjdk-devel und 19 weitere | 1:1.6.0.39-1.13.11.0.el6_7 und 2 weitere |
| Oracle Linux 7 | java-1.6.0-openjdk, java-1.6.0-openjdk-demo, java-1.6.0-openjdk-devel und 23 weitere | 1:1.6.0.39-1.13.11.0.el7_2 und 2 weitere |
| chainguard | openjdk-11-openj9, openjdk-17-openj9, openjdk-21-openj9 und 3 weitere | 0.53.0-r0 und 2 weitere |
| debian 7 | openjdk-6, openjdk-7 | 7u101-2.6.6-2~deb7u1 |
| debian 8 | openjdk-7 | 7u101-2.6.6-1~deb8u1 |
| ubuntu 12.04 | openjdk-6, openjdk-7 | 6b39-1.13.11-0ubuntu0.12.04.1 und 1 weitere |
| ubuntu 14.04 | openjdk-6, openjdk-7 | 6b39-1.13.11-0ubuntu0.14.04.1 und 1 weitere |
| ubuntu 15.10 | openjdk-6, openjdk-7, openjdk-8 | 6b39-1.13.11-0ubuntu0.15.10.2 und 2 weitere |
| ubuntu 16.04 | openjdk-8 | 8u91-b14-0ubuntu4~16.04.1 |
| ubuntu 16.04-ESM | openjdk-8 | 8u91-b14-0ubuntu4~16.04.1 |
Alle 95 Einträge aus 12 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| amazon linux 1 | java-1.6.0-openjdk | 1:1.6.0.39-1.13.11.1.74.amzn1 |
| amazon linux 1 | java-1.6.0-openjdk-debuginfo | 1:1.6.0.39-1.13.11.1.74.amzn1 |
| amazon linux 1 | java-1.6.0-openjdk-demo | 1:1.6.0.39-1.13.11.1.74.amzn1 |
| amazon linux 1 | java-1.6.0-openjdk-devel | 1:1.6.0.39-1.13.11.1.74.amzn1 |
| amazon linux 1 | java-1.6.0-openjdk-javadoc | 1:1.6.0.39-1.13.11.1.74.amzn1 |
| amazon linux 1 | java-1.6.0-openjdk-src | 1:1.6.0.39-1.13.11.1.74.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk | 1:1.7.0.101-2.6.6.1.67.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk-debuginfo | 1:1.7.0.101-2.6.6.1.67.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk-demo | 1:1.7.0.101-2.6.6.1.67.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk-devel | 1:1.7.0.101-2.6.6.1.67.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk-javadoc | 1:1.7.0.101-2.6.6.1.67.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk-src | 1:1.7.0.101-2.6.6.1.67.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk | 1:1.8.0.91-0.b14.10.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-debuginfo | 1:1.8.0.91-0.b14.10.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-demo | 1:1.8.0.91-0.b14.10.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-devel | 1:1.8.0.91-0.b14.10.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-headless | 1:1.8.0.91-0.b14.10.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-javadoc | 1:1.8.0.91-0.b14.10.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-src | 1:1.8.0.91-0.b14.10.amzn1 |
| Oracle Linux 5 | java-1.6.0-openjdk | 1:1.6.0.39-1.13.11.0.0.1.el5_11 |
| Oracle Linux 5 | java-1.6.0-openjdk-demo | 1:1.6.0.39-1.13.11.0.0.1.el5_11 |
| Oracle Linux 5 | java-1.6.0-openjdk-devel | 1:1.6.0.39-1.13.11.0.0.1.el5_11 |
| Oracle Linux 5 | java-1.6.0-openjdk-javadoc | 1:1.6.0.39-1.13.11.0.0.1.el5_11 |
| Oracle Linux 5 | java-1.6.0-openjdk-src | 1:1.6.0.39-1.13.11.0.0.1.el5_11 |
| Oracle Linux 5 | java-1.7.0-openjdk | 1:1.7.0.101-2.6.6.1.0.1.el5_11 |
| Oracle Linux 5 | java-1.7.0-openjdk-demo | 1:1.7.0.101-2.6.6.1.0.1.el5_11 |
| Oracle Linux 5 | java-1.7.0-openjdk-devel | 1:1.7.0.101-2.6.6.1.0.1.el5_11 |
| Oracle Linux 5 | java-1.7.0-openjdk-javadoc | 1:1.7.0.101-2.6.6.1.0.1.el5_11 |
| Oracle Linux 5 | java-1.7.0-openjdk-src | 1:1.7.0.101-2.6.6.1.0.1.el5_11 |
| Oracle Linux 6 | java-1.6.0-openjdk | 1:1.6.0.39-1.13.11.0.el6_7 |
| Oracle Linux 6 | java-1.6.0-openjdk-demo | 1:1.6.0.39-1.13.11.0.el6_7 |
| Oracle Linux 6 | java-1.6.0-openjdk-devel | 1:1.6.0.39-1.13.11.0.el6_7 |
| Oracle Linux 6 | java-1.6.0-openjdk-javadoc | 1:1.6.0.39-1.13.11.0.el6_7 |
| Oracle Linux 6 | java-1.6.0-openjdk-src | 1:1.6.0.39-1.13.11.0.el6_7 |
| Oracle Linux 6 | java-1.7.0-openjdk | 1:1.7.0.101-2.6.6.1.0.1.el6_7 |
| Oracle Linux 6 | java-1.7.0-openjdk-demo | 1:1.7.0.101-2.6.6.1.0.1.el6_7 |
| Oracle Linux 6 | java-1.7.0-openjdk-devel | 1:1.7.0.101-2.6.6.1.0.1.el6_7 |
| Oracle Linux 6 | java-1.7.0-openjdk-javadoc | 1:1.7.0.101-2.6.6.1.0.1.el6_7 |
| Oracle Linux 6 | java-1.7.0-openjdk-src | 1:1.7.0.101-2.6.6.1.0.1.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk-debug | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk-demo | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk-demo-debug | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk-devel | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk-devel-debug | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk-headless | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk-headless-debug | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk-javadoc | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk-javadoc-debug | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk-src | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk-src-debug | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 7 | java-1.6.0-openjdk | 1:1.6.0.39-1.13.11.0.el7_2 |
| Oracle Linux 7 | java-1.6.0-openjdk-demo | 1:1.6.0.39-1.13.11.0.el7_2 |
| Oracle Linux 7 | java-1.6.0-openjdk-devel | 1:1.6.0.39-1.13.11.0.el7_2 |
| Oracle Linux 7 | java-1.6.0-openjdk-javadoc | 1:1.6.0.39-1.13.11.0.el7_2 |
| Oracle Linux 7 | java-1.6.0-openjdk-src | 1:1.6.0.39-1.13.11.0.el7_2 |
| Oracle Linux 7 | java-1.7.0-openjdk | 1:1.7.0.101-2.6.6.1.0.1.el7_2 |
| Oracle Linux 7 | java-1.7.0-openjdk-accessibility | 1:1.7.0.101-2.6.6.1.0.1.el7_2 |
| Oracle Linux 7 | java-1.7.0-openjdk-demo | 1:1.7.0.101-2.6.6.1.0.1.el7_2 |
| Oracle Linux 7 | java-1.7.0-openjdk-devel | 1:1.7.0.101-2.6.6.1.0.1.el7_2 |
| Oracle Linux 7 | java-1.7.0-openjdk-headless | 1:1.7.0.101-2.6.6.1.0.1.el7_2 |
| Oracle Linux 7 | java-1.7.0-openjdk-javadoc | 1:1.7.0.101-2.6.6.1.0.1.el7_2 |
| Oracle Linux 7 | java-1.7.0-openjdk-src | 1:1.7.0.101-2.6.6.1.0.1.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-accessibility | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-accessibility-debug | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-debug | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-demo | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-demo-debug | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-devel | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-devel-debug | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-headless | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-headless-debug | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-javadoc | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-javadoc-debug | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-src | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-src-debug | 1:1.8.0.91-0.b14.el7_2 |
| chainguard | openjdk-11-openj9 | 0.53.0-r0 |
| chainguard | openjdk-17-openj9 | 0.53.0-r0 |
| chainguard | openjdk-21-openj9 | 0.53.0-r0 |
| chainguard | openjdk-25-openj9 | 0 |
| chainguard | openjdk-26-openj9 | 0 |
| chainguard | openjdk-8-openj9 | 0.53.0-r1 |
| debian 7 | openjdk-6 | kein Fix angegeben |
| debian 7 | openjdk-7 | 7u101-2.6.6-2~deb7u1 |
| debian 8 | openjdk-7 | 7u101-2.6.6-1~deb8u1 |
| ubuntu 12.04 | openjdk-6 | 6b39-1.13.11-0ubuntu0.12.04.1 |
| ubuntu 12.04 | openjdk-7 | 7u101-2.6.6-0ubuntu0.12.04.1 |
| ubuntu 14.04 | openjdk-6 | 6b39-1.13.11-0ubuntu0.14.04.1 |
| ubuntu 14.04 | openjdk-7 | 7u101-2.6.6-0ubuntu0.14.04.1 |
| ubuntu 15.10 | openjdk-6 | 6b39-1.13.11-0ubuntu0.15.10.2 |
| ubuntu 15.10 | openjdk-7 | 7u101-2.6.6-0ubuntu0.15.10.1 |
| ubuntu 15.10 | openjdk-8 | 8u91-b14-0ubuntu4~15.10.1 |
| ubuntu 16.04 | openjdk-8 | 8u91-b14-0ubuntu4~16.04.1 |
| ubuntu 16.04-ESM | openjdk-8 | 8u91-b14-0ubuntu4~16.04.1 |
Referenzen
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00009.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00012.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00022.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00026.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00039.html
Alle 71 Referenzen
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00040.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00042.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00058.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00059.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00061.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00067.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00002.html
- http://rhn.redhat.com/errata/RHSA-2016-0650.html
- http://rhn.redhat.com/errata/RHSA-2016-0651.html
- http://rhn.redhat.com/errata/RHSA-2016-0675.html
- http://rhn.redhat.com/errata/RHSA-2016-0676.html
- http://rhn.redhat.com/errata/RHSA-2016-0677.html
- http://rhn.redhat.com/errata/RHSA-2016-0678.html
- http://rhn.redhat.com/errata/RHSA-2016-0679.html
- http://rhn.redhat.com/errata/RHSA-2016-0701.html
- http://rhn.redhat.com/errata/RHSA-2016-0702.html
- http://rhn.redhat.com/errata/RHSA-2016-0708.html
- http://rhn.redhat.com/errata/RHSA-2016-0716.html
- http://rhn.redhat.com/errata/RHSA-2016-0723.html
- http://rhn.redhat.com/errata/RHSA-2016-1039.html
- http://www.debian.org/security/2016/dsa-3558
- http://www.openwall.com/lists/oss-security/2020/08/31/1
- http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
- http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html#AppendixJAVA
- http://www.oracle.com/technetwork/topics/security/cpuapr2016-2881694.html#AppendixJAVA
- http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
- http://www.securityfocus.com/bid/86421
- http://www.securitytracker.com/id/1035596
- http://www.securitytracker.com/id/1037331
- http://www.ubuntu.com/usn/USN-2963-1
- http://www.ubuntu.com/usn/USN-2964-1
- http://www.ubuntu.com/usn/USN-2972-1
- https://access.redhat.com/errata/RHSA-2016:1430
- https://access.redhat.com/errata/RHSA-2017:1216
- https://access.redhat.com/security/cve/CVE-2016-3427
- https://kc.mcafee.com/corporate/index?page=content&id=SB10159
- https://linux.oracle.com/cve/CVE-2016-3427.html
- https://linux.oracle.com/errata/ELSA-2016-0723.html
- https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551@%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113@%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708@%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b@%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7@%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3@%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424@%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a@%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc@%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95@%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb@%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c@%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b@%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/r5f48b16573a11fdf0b557cc3d1d71423ecde8ee771c29f32334fa948@%3Cdev.cassandra.apache.org%3E
- https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c@%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/rc3abf40b06c511d5693baf707d6444bf7745e6a1e343e6f530a12258@%3Cuser.cassandra.apache.org%3E
- https://nvd.nist.gov/vuln/detail/CVE-2016-3427
- https://security.gentoo.org/glsa/201606-18
- https://security.netapp.com/advisory/ntap-20160420-0001/
- https://ubuntu.com/security/notices/USN-2963-1
- https://ubuntu.com/security/notices/USN-2964-1
- https://ubuntu.com/security/notices/USN-2972-1
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-3427
- https://www.cve.org/CVERecord?id=CVE-2016-3427