CVE-2016-5556
JDK: unspecified vulnerability fixed in 6u131, 7u121, and 8u111 (2D)
Einstufung nach Quelle
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD, Red Hat.
Beschreibung
Unspecified vulnerability in Oracle Java SE 6u121, 7u111, and 8u102 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| chainguard | openjdk-11-openj9, openjdk-17-openj9, openjdk-21-openj9 und 3 weitere | 0.53.0-r0 und 2 weitere |
Alle 6 Einträge aus 1 Quelle zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| chainguard | openjdk-11-openj9 | 0.53.0-r0 |
| chainguard | openjdk-17-openj9 | 0.53.0-r0 |
| chainguard | openjdk-21-openj9 | 0.53.0-r0 |
| chainguard | openjdk-25-openj9 | 0.59.0-r1 |
| chainguard | openjdk-26-openj9 | 0.59.0-r1 |
| chainguard | openjdk-8-openj9 | 0.53.0-r1 |
Referenzen
- http://rhn.redhat.com/errata/RHSA-2016-2088.html
- http://rhn.redhat.com/errata/RHSA-2016-2089.html
- http://rhn.redhat.com/errata/RHSA-2016-2090.html
- http://rhn.redhat.com/errata/RHSA-2016-2136.html
- http://rhn.redhat.com/errata/RHSA-2016-2137.html
- http://rhn.redhat.com/errata/RHSA-2016-2138.html
- http://rhn.redhat.com/errata/RHSA-2016-2659.html
- http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
Alle 18 Referenzen
- http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html#AppendixJAVA
- http://www.securityfocus.com/bid/93618
- http://www.securitytracker.com/id/1037040
- https://access.redhat.com/errata/RHSA-2017:1216
- https://access.redhat.com/security/cve/CVE-2016-5556
- https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0@%3Cissues.bookkeeper.apache.org%3E
- https://nvd.nist.gov/vuln/detail/CVE-2016-5556
- https://security.gentoo.org/glsa/201611-04
- https://security.netapp.com/advisory/ntap-20161019-0001/
- https://www.cve.org/CVERecord?id=CVE-2016-5556