critique
CVE-2016-0687
OpenJDK: insufficient byte type checks (Hotspot, 8132051)
Dans la Trivy database depuis au moins le 24 oct. 2026, 07:11 UTCLa date d'entrée avant ce build n'est pas enregistrée.
Sévérité par source
NVD9.6CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Red Hat6.8AV:N/AC:M/Au:N/C:P/I:P/A:P
Le label propre à Trivy est CRITICAL. Critique selon NVD, Red Hat, Amazon, Oracle. Plus basse selon Ubuntu (moyenne).
Description
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 and Java SE Embedded 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to the Hotspot sub-component.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| amazon linux 1 | java-1.6.0-openjdk, java-1.6.0-openjdk-debuginfo, java-1.6.0-openjdk-demo et 16 autres | 1:1.6.0.39-1.13.11.1.74.amzn1 et 2 autres |
| Oracle Linux 5 | java-1.6.0-openjdk, java-1.6.0-openjdk-demo, java-1.6.0-openjdk-devel et 7 autres | 1:1.6.0.39-1.13.11.0.0.1.el5_11 et 1 autres |
| Oracle Linux 6 | java-1.6.0-openjdk, java-1.6.0-openjdk-demo, java-1.6.0-openjdk-devel et 19 autres | 1:1.6.0.39-1.13.11.0.el6_7 et 2 autres |
| Oracle Linux 7 | java-1.6.0-openjdk, java-1.6.0-openjdk-demo, java-1.6.0-openjdk-devel et 23 autres | 1:1.6.0.39-1.13.11.0.el7_2 et 2 autres |
| chainguard | openjdk-11-openj9, openjdk-17-openj9, openjdk-21-openj9 et 3 autres | 0.53.0-r0 et 2 autres |
| debian 7 | openjdk-6, openjdk-7 | 7u101-2.6.6-2~deb7u1 |
| debian 8 | openjdk-7 | 7u101-2.6.6-1~deb8u1 |
| ubuntu 12.04 | openjdk-6, openjdk-7 | 6b39-1.13.11-0ubuntu0.12.04.1 et 1 autres |
| ubuntu 14.04 | openjdk-6, openjdk-7 | 6b39-1.13.11-0ubuntu0.14.04.1 et 1 autres |
| ubuntu 15.10 | openjdk-6, openjdk-7, openjdk-8 | 6b39-1.13.11-0ubuntu0.15.10.2 et 2 autres |
| ubuntu 16.04 | openjdk-8 | 8u91-b14-0ubuntu4~16.04.1 |
| ubuntu 16.04-ESM | openjdk-8 | 8u91-b14-0ubuntu4~16.04.1 |
Afficher les 95 entrées de 12 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| amazon linux 1 | java-1.6.0-openjdk | 1:1.6.0.39-1.13.11.1.74.amzn1 |
| amazon linux 1 | java-1.6.0-openjdk-debuginfo | 1:1.6.0.39-1.13.11.1.74.amzn1 |
| amazon linux 1 | java-1.6.0-openjdk-demo | 1:1.6.0.39-1.13.11.1.74.amzn1 |
| amazon linux 1 | java-1.6.0-openjdk-devel | 1:1.6.0.39-1.13.11.1.74.amzn1 |
| amazon linux 1 | java-1.6.0-openjdk-javadoc | 1:1.6.0.39-1.13.11.1.74.amzn1 |
| amazon linux 1 | java-1.6.0-openjdk-src | 1:1.6.0.39-1.13.11.1.74.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk | 1:1.7.0.101-2.6.6.1.67.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk-debuginfo | 1:1.7.0.101-2.6.6.1.67.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk-demo | 1:1.7.0.101-2.6.6.1.67.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk-devel | 1:1.7.0.101-2.6.6.1.67.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk-javadoc | 1:1.7.0.101-2.6.6.1.67.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk-src | 1:1.7.0.101-2.6.6.1.67.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk | 1:1.8.0.91-0.b14.10.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-debuginfo | 1:1.8.0.91-0.b14.10.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-demo | 1:1.8.0.91-0.b14.10.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-devel | 1:1.8.0.91-0.b14.10.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-headless | 1:1.8.0.91-0.b14.10.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-javadoc | 1:1.8.0.91-0.b14.10.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-src | 1:1.8.0.91-0.b14.10.amzn1 |
| Oracle Linux 5 | java-1.6.0-openjdk | 1:1.6.0.39-1.13.11.0.0.1.el5_11 |
| Oracle Linux 5 | java-1.6.0-openjdk-demo | 1:1.6.0.39-1.13.11.0.0.1.el5_11 |
| Oracle Linux 5 | java-1.6.0-openjdk-devel | 1:1.6.0.39-1.13.11.0.0.1.el5_11 |
| Oracle Linux 5 | java-1.6.0-openjdk-javadoc | 1:1.6.0.39-1.13.11.0.0.1.el5_11 |
| Oracle Linux 5 | java-1.6.0-openjdk-src | 1:1.6.0.39-1.13.11.0.0.1.el5_11 |
| Oracle Linux 5 | java-1.7.0-openjdk | 1:1.7.0.101-2.6.6.1.0.1.el5_11 |
| Oracle Linux 5 | java-1.7.0-openjdk-demo | 1:1.7.0.101-2.6.6.1.0.1.el5_11 |
| Oracle Linux 5 | java-1.7.0-openjdk-devel | 1:1.7.0.101-2.6.6.1.0.1.el5_11 |
| Oracle Linux 5 | java-1.7.0-openjdk-javadoc | 1:1.7.0.101-2.6.6.1.0.1.el5_11 |
| Oracle Linux 5 | java-1.7.0-openjdk-src | 1:1.7.0.101-2.6.6.1.0.1.el5_11 |
| Oracle Linux 6 | java-1.6.0-openjdk | 1:1.6.0.39-1.13.11.0.el6_7 |
| Oracle Linux 6 | java-1.6.0-openjdk-demo | 1:1.6.0.39-1.13.11.0.el6_7 |
| Oracle Linux 6 | java-1.6.0-openjdk-devel | 1:1.6.0.39-1.13.11.0.el6_7 |
| Oracle Linux 6 | java-1.6.0-openjdk-javadoc | 1:1.6.0.39-1.13.11.0.el6_7 |
| Oracle Linux 6 | java-1.6.0-openjdk-src | 1:1.6.0.39-1.13.11.0.el6_7 |
| Oracle Linux 6 | java-1.7.0-openjdk | 1:1.7.0.101-2.6.6.1.0.1.el6_7 |
| Oracle Linux 6 | java-1.7.0-openjdk-demo | 1:1.7.0.101-2.6.6.1.0.1.el6_7 |
| Oracle Linux 6 | java-1.7.0-openjdk-devel | 1:1.7.0.101-2.6.6.1.0.1.el6_7 |
| Oracle Linux 6 | java-1.7.0-openjdk-javadoc | 1:1.7.0.101-2.6.6.1.0.1.el6_7 |
| Oracle Linux 6 | java-1.7.0-openjdk-src | 1:1.7.0.101-2.6.6.1.0.1.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk-debug | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk-demo | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk-demo-debug | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk-devel | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk-devel-debug | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk-headless | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk-headless-debug | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk-javadoc | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk-javadoc-debug | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk-src | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk-src-debug | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 7 | java-1.6.0-openjdk | 1:1.6.0.39-1.13.11.0.el7_2 |
| Oracle Linux 7 | java-1.6.0-openjdk-demo | 1:1.6.0.39-1.13.11.0.el7_2 |
| Oracle Linux 7 | java-1.6.0-openjdk-devel | 1:1.6.0.39-1.13.11.0.el7_2 |
| Oracle Linux 7 | java-1.6.0-openjdk-javadoc | 1:1.6.0.39-1.13.11.0.el7_2 |
| Oracle Linux 7 | java-1.6.0-openjdk-src | 1:1.6.0.39-1.13.11.0.el7_2 |
| Oracle Linux 7 | java-1.7.0-openjdk | 1:1.7.0.101-2.6.6.1.0.1.el7_2 |
| Oracle Linux 7 | java-1.7.0-openjdk-accessibility | 1:1.7.0.101-2.6.6.1.0.1.el7_2 |
| Oracle Linux 7 | java-1.7.0-openjdk-demo | 1:1.7.0.101-2.6.6.1.0.1.el7_2 |
| Oracle Linux 7 | java-1.7.0-openjdk-devel | 1:1.7.0.101-2.6.6.1.0.1.el7_2 |
| Oracle Linux 7 | java-1.7.0-openjdk-headless | 1:1.7.0.101-2.6.6.1.0.1.el7_2 |
| Oracle Linux 7 | java-1.7.0-openjdk-javadoc | 1:1.7.0.101-2.6.6.1.0.1.el7_2 |
| Oracle Linux 7 | java-1.7.0-openjdk-src | 1:1.7.0.101-2.6.6.1.0.1.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-accessibility | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-accessibility-debug | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-debug | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-demo | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-demo-debug | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-devel | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-devel-debug | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-headless | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-headless-debug | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-javadoc | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-javadoc-debug | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-src | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-src-debug | 1:1.8.0.91-0.b14.el7_2 |
| chainguard | openjdk-11-openj9 | 0.53.0-r0 |
| chainguard | openjdk-17-openj9 | 0.53.0-r0 |
| chainguard | openjdk-21-openj9 | 0.53.0-r0 |
| chainguard | openjdk-25-openj9 | 0.59.0-r1 |
| chainguard | openjdk-26-openj9 | 0.59.0-r1 |
| chainguard | openjdk-8-openj9 | 0.53.0-r1 |
| debian 7 | openjdk-6 | pas de correctif indiqué |
| debian 7 | openjdk-7 | 7u101-2.6.6-2~deb7u1 |
| debian 8 | openjdk-7 | 7u101-2.6.6-1~deb8u1 |
| ubuntu 12.04 | openjdk-6 | 6b39-1.13.11-0ubuntu0.12.04.1 |
| ubuntu 12.04 | openjdk-7 | 7u101-2.6.6-0ubuntu0.12.04.1 |
| ubuntu 14.04 | openjdk-6 | 6b39-1.13.11-0ubuntu0.14.04.1 |
| ubuntu 14.04 | openjdk-7 | 7u101-2.6.6-0ubuntu0.14.04.1 |
| ubuntu 15.10 | openjdk-6 | 6b39-1.13.11-0ubuntu0.15.10.2 |
| ubuntu 15.10 | openjdk-7 | 7u101-2.6.6-0ubuntu0.15.10.1 |
| ubuntu 15.10 | openjdk-8 | 8u91-b14-0ubuntu4~15.10.1 |
| ubuntu 16.04 | openjdk-8 | 8u91-b14-0ubuntu4~16.04.1 |
| ubuntu 16.04-ESM | openjdk-8 | 8u91-b14-0ubuntu4~16.04.1 |
Références
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00009.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00012.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00022.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00026.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00039.html
Les 49 références
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00040.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00042.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00058.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00059.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00061.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00067.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00002.html
- http://rhn.redhat.com/errata/RHSA-2016-0650.html
- http://rhn.redhat.com/errata/RHSA-2016-0651.html
- http://rhn.redhat.com/errata/RHSA-2016-0675.html
- http://rhn.redhat.com/errata/RHSA-2016-0676.html
- http://rhn.redhat.com/errata/RHSA-2016-0677.html
- http://rhn.redhat.com/errata/RHSA-2016-0678.html
- http://rhn.redhat.com/errata/RHSA-2016-0679.html
- http://rhn.redhat.com/errata/RHSA-2016-0701.html
- http://rhn.redhat.com/errata/RHSA-2016-0702.html
- http://rhn.redhat.com/errata/RHSA-2016-0708.html
- http://rhn.redhat.com/errata/RHSA-2016-0716.html
- http://rhn.redhat.com/errata/RHSA-2016-0723.html
- http://rhn.redhat.com/errata/RHSA-2016-1039.html
- http://www.debian.org/security/2016/dsa-3558
- http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
- http://www.oracle.com/technetwork/topics/security/cpuapr2016-2881694.html#AppendixJAVA
- http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
- http://www.securityfocus.com/bid/86459
- http://www.securitytracker.com/id/1035596
- http://www.ubuntu.com/usn/USN-2963-1
- http://www.ubuntu.com/usn/USN-2964-1
- http://www.ubuntu.com/usn/USN-2972-1
- https://access.redhat.com/errata/RHSA-2016:1430
- https://access.redhat.com/errata/RHSA-2017:1216
- https://access.redhat.com/security/cve/CVE-2016-0687
- https://linux.oracle.com/cve/CVE-2016-0687.html
- https://linux.oracle.com/errata/ELSA-2016-0723.html
- https://nvd.nist.gov/vuln/detail/CVE-2016-0687
- https://security.gentoo.org/glsa/201606-18
- https://security.netapp.com/advisory/ntap-20160420-0001/
- https://ubuntu.com/security/notices/USN-2963-1
- https://ubuntu.com/security/notices/USN-2964-1
- https://ubuntu.com/security/notices/USN-2972-1
- https://www.cve.org/CVERecord?id=CVE-2016-0687