kritisch
CVE-2016-3606
OpenJDK: insufficient bytecode verification (Hotspot, 8155981)
In der Trivy Database seit spätestens 24. Okt. 2026, 07:11 UTCWann der Eintrag vor diesem Build hinzukam, ist nicht erfasst.
Einstufung nach Quelle
NVD9.6CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Red Hat8.8CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD, Red Hat. Niedriger laut Amazon (hoch), Oracle (hoch), Ubuntu (mittel).
Beschreibung
Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| amazon linux 1 | java-1.6.0-openjdk, java-1.6.0-openjdk-debuginfo, java-1.6.0-openjdk-demo und 16 weitere | 1:1.6.0.40-1.13.12.6.75.amzn1 und 2 weitere |
| chainguard | openjdk-11-openj9, openjdk-17-openj9, openjdk-21-openj9 und 3 weitere | 0.53.0-r0 und 2 weitere |
| debian 7 | openjdk-7 | 7u111-2.6.7-1~deb7u1 |
| debian 8 | openjdk-7 | 7u111-2.6.7-1~deb8u1 |
| Oracle Linux 5 | java-1.6.0-openjdk, java-1.6.0-openjdk-demo, java-1.6.0-openjdk-devel und 7 weitere | 1:1.6.0.40-1.13.12.4.0.1.el5_11 und 1 weitere |
| Oracle Linux 6 | java-1.6.0-openjdk, java-1.6.0-openjdk-demo, java-1.6.0-openjdk-devel und 19 weitere | 1:1.6.0.40-1.13.12.6.el6_8 und 2 weitere |
| Oracle Linux 7 | java-1.6.0-openjdk, java-1.6.0-openjdk-demo, java-1.6.0-openjdk-devel und 23 weitere | 1:1.6.0.40-1.13.12.5.el7_2 und 2 weitere |
| ubuntu 12.04 | openjdk-6, openjdk-7 | 6b40-1.13.12-0ubuntu0.12.04.1 und 1 weitere |
| ubuntu 14.04 | openjdk-6, openjdk-7 | 6b40-1.13.12-0ubuntu0.14.04.2 und 1 weitere |
| ubuntu 15.10 | openjdk-8 | 8u91-b14-3ubuntu1~15.10.1 |
| ubuntu 16.04 | openjdk-8 | 8u91-b14-3ubuntu1~16.04.1 |
| ubuntu 16.04-ESM | openjdk-8 | 8u91-b14-3ubuntu1~16.04.1 |
Alle 92 Einträge aus 12 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| amazon linux 1 | java-1.6.0-openjdk | 1:1.6.0.40-1.13.12.6.75.amzn1 |
| amazon linux 1 | java-1.6.0-openjdk-debuginfo | 1:1.6.0.40-1.13.12.6.75.amzn1 |
| amazon linux 1 | java-1.6.0-openjdk-demo | 1:1.6.0.40-1.13.12.6.75.amzn1 |
| amazon linux 1 | java-1.6.0-openjdk-devel | 1:1.6.0.40-1.13.12.6.75.amzn1 |
| amazon linux 1 | java-1.6.0-openjdk-javadoc | 1:1.6.0.40-1.13.12.6.75.amzn1 |
| amazon linux 1 | java-1.6.0-openjdk-src | 1:1.6.0.40-1.13.12.6.75.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk | 1:1.7.0.111-2.6.7.2.68.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk-debuginfo | 1:1.7.0.111-2.6.7.2.68.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk-demo | 1:1.7.0.111-2.6.7.2.68.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk-devel | 1:1.7.0.111-2.6.7.2.68.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk-javadoc | 1:1.7.0.111-2.6.7.2.68.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk-src | 1:1.7.0.111-2.6.7.2.68.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk | 1:1.8.0.101-3.b13.24.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-debuginfo | 1:1.8.0.101-3.b13.24.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-demo | 1:1.8.0.101-3.b13.24.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-devel | 1:1.8.0.101-3.b13.24.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-headless | 1:1.8.0.101-3.b13.24.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-javadoc | 1:1.8.0.101-3.b13.24.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-src | 1:1.8.0.101-3.b13.24.amzn1 |
| chainguard | openjdk-11-openj9 | 0.53.0-r0 |
| chainguard | openjdk-17-openj9 | 0.53.0-r0 |
| chainguard | openjdk-21-openj9 | 0.53.0-r0 |
| chainguard | openjdk-25-openj9 | 0.59.0-r1 |
| chainguard | openjdk-26-openj9 | 0.59.0-r1 |
| chainguard | openjdk-8-openj9 | 0.53.0-r1 |
| debian 7 | openjdk-7 | 7u111-2.6.7-1~deb7u1 |
| debian 8 | openjdk-7 | 7u111-2.6.7-1~deb8u1 |
| Oracle Linux 5 | java-1.6.0-openjdk | 1:1.6.0.40-1.13.12.4.0.1.el5_11 |
| Oracle Linux 5 | java-1.6.0-openjdk-demo | 1:1.6.0.40-1.13.12.4.0.1.el5_11 |
| Oracle Linux 5 | java-1.6.0-openjdk-devel | 1:1.6.0.40-1.13.12.4.0.1.el5_11 |
| Oracle Linux 5 | java-1.6.0-openjdk-javadoc | 1:1.6.0.40-1.13.12.4.0.1.el5_11 |
| Oracle Linux 5 | java-1.6.0-openjdk-src | 1:1.6.0.40-1.13.12.4.0.1.el5_11 |
| Oracle Linux 5 | java-1.7.0-openjdk | 1:1.7.0.111-2.6.7.1.0.1.el5_11 |
| Oracle Linux 5 | java-1.7.0-openjdk-demo | 1:1.7.0.111-2.6.7.1.0.1.el5_11 |
| Oracle Linux 5 | java-1.7.0-openjdk-devel | 1:1.7.0.111-2.6.7.1.0.1.el5_11 |
| Oracle Linux 5 | java-1.7.0-openjdk-javadoc | 1:1.7.0.111-2.6.7.1.0.1.el5_11 |
| Oracle Linux 5 | java-1.7.0-openjdk-src | 1:1.7.0.111-2.6.7.1.0.1.el5_11 |
| Oracle Linux 6 | java-1.6.0-openjdk | 1:1.6.0.40-1.13.12.6.el6_8 |
| Oracle Linux 6 | java-1.6.0-openjdk-demo | 1:1.6.0.40-1.13.12.6.el6_8 |
| Oracle Linux 6 | java-1.6.0-openjdk-devel | 1:1.6.0.40-1.13.12.6.el6_8 |
| Oracle Linux 6 | java-1.6.0-openjdk-javadoc | 1:1.6.0.40-1.13.12.6.el6_8 |
| Oracle Linux 6 | java-1.6.0-openjdk-src | 1:1.6.0.40-1.13.12.6.el6_8 |
| Oracle Linux 6 | java-1.7.0-openjdk | 1:1.7.0.111-2.6.7.2.0.1.el6_8 |
| Oracle Linux 6 | java-1.7.0-openjdk-demo | 1:1.7.0.111-2.6.7.2.0.1.el6_8 |
| Oracle Linux 6 | java-1.7.0-openjdk-devel | 1:1.7.0.111-2.6.7.2.0.1.el6_8 |
| Oracle Linux 6 | java-1.7.0-openjdk-javadoc | 1:1.7.0.111-2.6.7.2.0.1.el6_8 |
| Oracle Linux 6 | java-1.7.0-openjdk-src | 1:1.7.0.111-2.6.7.2.0.1.el6_8 |
| Oracle Linux 6 | java-1.8.0-openjdk | 1:1.8.0.101-3.b13.el6_8 |
| Oracle Linux 6 | java-1.8.0-openjdk-debug | 1:1.8.0.101-3.b13.el6_8 |
| Oracle Linux 6 | java-1.8.0-openjdk-demo | 1:1.8.0.101-3.b13.el6_8 |
| Oracle Linux 6 | java-1.8.0-openjdk-demo-debug | 1:1.8.0.101-3.b13.el6_8 |
| Oracle Linux 6 | java-1.8.0-openjdk-devel | 1:1.8.0.101-3.b13.el6_8 |
| Oracle Linux 6 | java-1.8.0-openjdk-devel-debug | 1:1.8.0.101-3.b13.el6_8 |
| Oracle Linux 6 | java-1.8.0-openjdk-headless | 1:1.8.0.101-3.b13.el6_8 |
| Oracle Linux 6 | java-1.8.0-openjdk-headless-debug | 1:1.8.0.101-3.b13.el6_8 |
| Oracle Linux 6 | java-1.8.0-openjdk-javadoc | 1:1.8.0.101-3.b13.el6_8 |
| Oracle Linux 6 | java-1.8.0-openjdk-javadoc-debug | 1:1.8.0.101-3.b13.el6_8 |
| Oracle Linux 6 | java-1.8.0-openjdk-src | 1:1.8.0.101-3.b13.el6_8 |
| Oracle Linux 6 | java-1.8.0-openjdk-src-debug | 1:1.8.0.101-3.b13.el6_8 |
| Oracle Linux 7 | java-1.6.0-openjdk | 1:1.6.0.40-1.13.12.5.el7_2 |
| Oracle Linux 7 | java-1.6.0-openjdk-demo | 1:1.6.0.40-1.13.12.5.el7_2 |
| Oracle Linux 7 | java-1.6.0-openjdk-devel | 1:1.6.0.40-1.13.12.5.el7_2 |
| Oracle Linux 7 | java-1.6.0-openjdk-javadoc | 1:1.6.0.40-1.13.12.5.el7_2 |
| Oracle Linux 7 | java-1.6.0-openjdk-src | 1:1.6.0.40-1.13.12.5.el7_2 |
| Oracle Linux 7 | java-1.7.0-openjdk | 1:1.7.0.111-2.6.7.2.0.1.el7_2 |
| Oracle Linux 7 | java-1.7.0-openjdk-accessibility | 1:1.7.0.111-2.6.7.2.0.1.el7_2 |
| Oracle Linux 7 | java-1.7.0-openjdk-demo | 1:1.7.0.111-2.6.7.2.0.1.el7_2 |
| Oracle Linux 7 | java-1.7.0-openjdk-devel | 1:1.7.0.111-2.6.7.2.0.1.el7_2 |
| Oracle Linux 7 | java-1.7.0-openjdk-headless | 1:1.7.0.111-2.6.7.2.0.1.el7_2 |
| Oracle Linux 7 | java-1.7.0-openjdk-javadoc | 1:1.7.0.111-2.6.7.2.0.1.el7_2 |
| Oracle Linux 7 | java-1.7.0-openjdk-src | 1:1.7.0.111-2.6.7.2.0.1.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk | 1:1.8.0.101-3.b13.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-accessibility | 1:1.8.0.101-3.b13.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-accessibility-debug | 1:1.8.0.101-3.b13.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-debug | 1:1.8.0.101-3.b13.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-demo | 1:1.8.0.101-3.b13.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-demo-debug | 1:1.8.0.101-3.b13.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-devel | 1:1.8.0.101-3.b13.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-devel-debug | 1:1.8.0.101-3.b13.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-headless | 1:1.8.0.101-3.b13.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-headless-debug | 1:1.8.0.101-3.b13.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-javadoc | 1:1.8.0.101-3.b13.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-javadoc-debug | 1:1.8.0.101-3.b13.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-src | 1:1.8.0.101-3.b13.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-src-debug | 1:1.8.0.101-3.b13.el7_2 |
| ubuntu 12.04 | openjdk-6 | 6b40-1.13.12-0ubuntu0.12.04.1 |
| ubuntu 12.04 | openjdk-7 | 7u111-2.6.7-0ubuntu0.12.04.2 |
| ubuntu 14.04 | openjdk-6 | 6b40-1.13.12-0ubuntu0.14.04.2 |
| ubuntu 14.04 | openjdk-7 | 7u111-2.6.7-0ubuntu0.14.04.3 |
| ubuntu 15.10 | openjdk-8 | 8u91-b14-3ubuntu1~15.10.1 |
| ubuntu 16.04 | openjdk-8 | 8u91-b14-3ubuntu1~16.04.1 |
| ubuntu 16.04-ESM | openjdk-8 | 8u91-b14-3ubuntu1~16.04.1 |
Referenzen
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00011.html
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.html
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00032.html
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00034.html
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00035.html
- http://lists.opensuse.org/opensuse-updates/2016-08/msg00028.html
- http://rhn.redhat.com/errata/RHSA-2016-1504.html
Alle 34 Referenzen
- http://rhn.redhat.com/errata/RHSA-2016-1776.html
- http://www.debian.org/security/2016/dsa-3641
- http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
- http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html#AppendixJAVA
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html
- http://www.securityfocus.com/bid/91787
- http://www.securityfocus.com/bid/91912
- http://www.securitytracker.com/id/1036365
- http://www.ubuntu.com/usn/USN-3043-1
- http://www.ubuntu.com/usn/USN-3062-1
- http://www.ubuntu.com/usn/USN-3077-1
- https://access.redhat.com/errata/RHSA-2016:1458
- https://access.redhat.com/errata/RHSA-2016:1475
- https://access.redhat.com/errata/RHSA-2016:1476
- https://access.redhat.com/security/cve/CVE-2016-3606
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-3606
- https://linux.oracle.com/cve/CVE-2016-3606.html
- https://linux.oracle.com/errata/ELSA-2016-1776.html
- https://nvd.nist.gov/vuln/detail/CVE-2016-3606
- https://security.gentoo.org/glsa/201610-08
- https://security.gentoo.org/glsa/201701-43
- https://security.netapp.com/advisory/ntap-20160721-0001/
- https://ubuntu.com/security/notices/USN-3043-1
- https://ubuntu.com/security/notices/USN-3062-1
- https://ubuntu.com/security/notices/USN-3077-1
- https://www.cve.org/CVERecord?id=CVE-2016-3606