kritik
CVE-2016-0686
OpenJDK: insufficient thread consistency checks in ObjectInputStream (Serialization, 8129952)
En geç 24 Eki 2026, 07:11 UTC tarihinden beri Trivy database'indeO derlemeden önce ne zaman girdiği kayıtlı değil.
Kaynağa göre önem derecesi
NVD9.6CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Red Hat6.8AV:N/AC:M/Au:N/C:P/I:P/A:P
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD, Red Hat, Amazon, Oracle. Daha düşük diyenler: Ubuntu (orta).
Açıklama
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 and Java SE Embedded 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Serialization.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| amazon linux 1 | java-1.6.0-openjdk, java-1.6.0-openjdk-debuginfo, java-1.6.0-openjdk-demo ve 16 tane daha | 1:1.6.0.39-1.13.11.1.74.amzn1 ve 2 tane daha |
| Oracle Linux 5 | java-1.6.0-openjdk, java-1.6.0-openjdk-demo, java-1.6.0-openjdk-devel ve 7 tane daha | 1:1.6.0.39-1.13.11.0.0.1.el5_11 ve 1 tane daha |
| Oracle Linux 6 | java-1.6.0-openjdk, java-1.6.0-openjdk-demo, java-1.6.0-openjdk-devel ve 19 tane daha | 1:1.6.0.39-1.13.11.0.el6_7 ve 2 tane daha |
| Oracle Linux 7 | java-1.6.0-openjdk, java-1.6.0-openjdk-demo, java-1.6.0-openjdk-devel ve 23 tane daha | 1:1.6.0.39-1.13.11.0.el7_2 ve 2 tane daha |
| chainguard | openjdk-11-openj9, openjdk-17-openj9, openjdk-21-openj9 ve 3 tane daha | 0.53.0-r0 ve 2 tane daha |
| debian 7 | openjdk-6, openjdk-7 | 7u101-2.6.6-2~deb7u1 |
| debian 8 | openjdk-7 | 7u101-2.6.6-1~deb8u1 |
| ubuntu 12.04 | openjdk-6, openjdk-7 | 6b39-1.13.11-0ubuntu0.12.04.1 ve 1 tane daha |
| ubuntu 14.04 | openjdk-6, openjdk-7 | 6b39-1.13.11-0ubuntu0.14.04.1 ve 1 tane daha |
| ubuntu 15.10 | openjdk-6, openjdk-7, openjdk-8 | 6b39-1.13.11-0ubuntu0.15.10.2 ve 2 tane daha |
| ubuntu 16.04 | openjdk-8 | 8u91-b14-0ubuntu4~16.04.1 |
| ubuntu 16.04-ESM | openjdk-8 | 8u91-b14-0ubuntu4~16.04.1 |
12 kaynaktaki 95 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| amazon linux 1 | java-1.6.0-openjdk | 1:1.6.0.39-1.13.11.1.74.amzn1 |
| amazon linux 1 | java-1.6.0-openjdk-debuginfo | 1:1.6.0.39-1.13.11.1.74.amzn1 |
| amazon linux 1 | java-1.6.0-openjdk-demo | 1:1.6.0.39-1.13.11.1.74.amzn1 |
| amazon linux 1 | java-1.6.0-openjdk-devel | 1:1.6.0.39-1.13.11.1.74.amzn1 |
| amazon linux 1 | java-1.6.0-openjdk-javadoc | 1:1.6.0.39-1.13.11.1.74.amzn1 |
| amazon linux 1 | java-1.6.0-openjdk-src | 1:1.6.0.39-1.13.11.1.74.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk | 1:1.7.0.101-2.6.6.1.67.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk-debuginfo | 1:1.7.0.101-2.6.6.1.67.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk-demo | 1:1.7.0.101-2.6.6.1.67.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk-devel | 1:1.7.0.101-2.6.6.1.67.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk-javadoc | 1:1.7.0.101-2.6.6.1.67.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk-src | 1:1.7.0.101-2.6.6.1.67.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk | 1:1.8.0.91-0.b14.10.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-debuginfo | 1:1.8.0.91-0.b14.10.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-demo | 1:1.8.0.91-0.b14.10.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-devel | 1:1.8.0.91-0.b14.10.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-headless | 1:1.8.0.91-0.b14.10.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-javadoc | 1:1.8.0.91-0.b14.10.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-src | 1:1.8.0.91-0.b14.10.amzn1 |
| Oracle Linux 5 | java-1.6.0-openjdk | 1:1.6.0.39-1.13.11.0.0.1.el5_11 |
| Oracle Linux 5 | java-1.6.0-openjdk-demo | 1:1.6.0.39-1.13.11.0.0.1.el5_11 |
| Oracle Linux 5 | java-1.6.0-openjdk-devel | 1:1.6.0.39-1.13.11.0.0.1.el5_11 |
| Oracle Linux 5 | java-1.6.0-openjdk-javadoc | 1:1.6.0.39-1.13.11.0.0.1.el5_11 |
| Oracle Linux 5 | java-1.6.0-openjdk-src | 1:1.6.0.39-1.13.11.0.0.1.el5_11 |
| Oracle Linux 5 | java-1.7.0-openjdk | 1:1.7.0.101-2.6.6.1.0.1.el5_11 |
| Oracle Linux 5 | java-1.7.0-openjdk-demo | 1:1.7.0.101-2.6.6.1.0.1.el5_11 |
| Oracle Linux 5 | java-1.7.0-openjdk-devel | 1:1.7.0.101-2.6.6.1.0.1.el5_11 |
| Oracle Linux 5 | java-1.7.0-openjdk-javadoc | 1:1.7.0.101-2.6.6.1.0.1.el5_11 |
| Oracle Linux 5 | java-1.7.0-openjdk-src | 1:1.7.0.101-2.6.6.1.0.1.el5_11 |
| Oracle Linux 6 | java-1.6.0-openjdk | 1:1.6.0.39-1.13.11.0.el6_7 |
| Oracle Linux 6 | java-1.6.0-openjdk-demo | 1:1.6.0.39-1.13.11.0.el6_7 |
| Oracle Linux 6 | java-1.6.0-openjdk-devel | 1:1.6.0.39-1.13.11.0.el6_7 |
| Oracle Linux 6 | java-1.6.0-openjdk-javadoc | 1:1.6.0.39-1.13.11.0.el6_7 |
| Oracle Linux 6 | java-1.6.0-openjdk-src | 1:1.6.0.39-1.13.11.0.el6_7 |
| Oracle Linux 6 | java-1.7.0-openjdk | 1:1.7.0.101-2.6.6.1.0.1.el6_7 |
| Oracle Linux 6 | java-1.7.0-openjdk-demo | 1:1.7.0.101-2.6.6.1.0.1.el6_7 |
| Oracle Linux 6 | java-1.7.0-openjdk-devel | 1:1.7.0.101-2.6.6.1.0.1.el6_7 |
| Oracle Linux 6 | java-1.7.0-openjdk-javadoc | 1:1.7.0.101-2.6.6.1.0.1.el6_7 |
| Oracle Linux 6 | java-1.7.0-openjdk-src | 1:1.7.0.101-2.6.6.1.0.1.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk-debug | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk-demo | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk-demo-debug | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk-devel | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk-devel-debug | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk-headless | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk-headless-debug | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk-javadoc | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk-javadoc-debug | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk-src | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 6 | java-1.8.0-openjdk-src-debug | 1:1.8.0.91-0.b14.el6_7 |
| Oracle Linux 7 | java-1.6.0-openjdk | 1:1.6.0.39-1.13.11.0.el7_2 |
| Oracle Linux 7 | java-1.6.0-openjdk-demo | 1:1.6.0.39-1.13.11.0.el7_2 |
| Oracle Linux 7 | java-1.6.0-openjdk-devel | 1:1.6.0.39-1.13.11.0.el7_2 |
| Oracle Linux 7 | java-1.6.0-openjdk-javadoc | 1:1.6.0.39-1.13.11.0.el7_2 |
| Oracle Linux 7 | java-1.6.0-openjdk-src | 1:1.6.0.39-1.13.11.0.el7_2 |
| Oracle Linux 7 | java-1.7.0-openjdk | 1:1.7.0.101-2.6.6.1.0.1.el7_2 |
| Oracle Linux 7 | java-1.7.0-openjdk-accessibility | 1:1.7.0.101-2.6.6.1.0.1.el7_2 |
| Oracle Linux 7 | java-1.7.0-openjdk-demo | 1:1.7.0.101-2.6.6.1.0.1.el7_2 |
| Oracle Linux 7 | java-1.7.0-openjdk-devel | 1:1.7.0.101-2.6.6.1.0.1.el7_2 |
| Oracle Linux 7 | java-1.7.0-openjdk-headless | 1:1.7.0.101-2.6.6.1.0.1.el7_2 |
| Oracle Linux 7 | java-1.7.0-openjdk-javadoc | 1:1.7.0.101-2.6.6.1.0.1.el7_2 |
| Oracle Linux 7 | java-1.7.0-openjdk-src | 1:1.7.0.101-2.6.6.1.0.1.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-accessibility | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-accessibility-debug | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-debug | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-demo | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-demo-debug | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-devel | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-devel-debug | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-headless | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-headless-debug | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-javadoc | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-javadoc-debug | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-src | 1:1.8.0.91-0.b14.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-src-debug | 1:1.8.0.91-0.b14.el7_2 |
| chainguard | openjdk-11-openj9 | 0.53.0-r0 |
| chainguard | openjdk-17-openj9 | 0.53.0-r0 |
| chainguard | openjdk-21-openj9 | 0.53.0-r0 |
| chainguard | openjdk-25-openj9 | 0.59.0-r1 |
| chainguard | openjdk-26-openj9 | 0.59.0-r1 |
| chainguard | openjdk-8-openj9 | 0.53.0-r1 |
| debian 7 | openjdk-6 | düzeltme belirtilmemiş |
| debian 7 | openjdk-7 | 7u101-2.6.6-2~deb7u1 |
| debian 8 | openjdk-7 | 7u101-2.6.6-1~deb8u1 |
| ubuntu 12.04 | openjdk-6 | 6b39-1.13.11-0ubuntu0.12.04.1 |
| ubuntu 12.04 | openjdk-7 | 7u101-2.6.6-0ubuntu0.12.04.1 |
| ubuntu 14.04 | openjdk-6 | 6b39-1.13.11-0ubuntu0.14.04.1 |
| ubuntu 14.04 | openjdk-7 | 7u101-2.6.6-0ubuntu0.14.04.1 |
| ubuntu 15.10 | openjdk-6 | 6b39-1.13.11-0ubuntu0.15.10.2 |
| ubuntu 15.10 | openjdk-7 | 7u101-2.6.6-0ubuntu0.15.10.1 |
| ubuntu 15.10 | openjdk-8 | 8u91-b14-0ubuntu4~15.10.1 |
| ubuntu 16.04 | openjdk-8 | 8u91-b14-0ubuntu4~16.04.1 |
| ubuntu 16.04-ESM | openjdk-8 | 8u91-b14-0ubuntu4~16.04.1 |
Referanslar
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00009.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00012.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00022.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00026.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00039.html
50 referansın hepsi
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00040.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00042.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00058.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00059.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00061.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00067.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00002.html
- http://rhn.redhat.com/errata/RHSA-2016-0650.html
- http://rhn.redhat.com/errata/RHSA-2016-0651.html
- http://rhn.redhat.com/errata/RHSA-2016-0675.html
- http://rhn.redhat.com/errata/RHSA-2016-0676.html
- http://rhn.redhat.com/errata/RHSA-2016-0677.html
- http://rhn.redhat.com/errata/RHSA-2016-0678.html
- http://rhn.redhat.com/errata/RHSA-2016-0679.html
- http://rhn.redhat.com/errata/RHSA-2016-0701.html
- http://rhn.redhat.com/errata/RHSA-2016-0702.html
- http://rhn.redhat.com/errata/RHSA-2016-0708.html
- http://rhn.redhat.com/errata/RHSA-2016-0716.html
- http://rhn.redhat.com/errata/RHSA-2016-0723.html
- http://rhn.redhat.com/errata/RHSA-2016-1039.html
- http://www.debian.org/security/2016/dsa-3558
- http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
- http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html#AppendixJAVA
- http://www.oracle.com/technetwork/topics/security/cpuapr2016-2881694.html#AppendixJAVA
- http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
- http://www.securityfocus.com/bid/86473
- http://www.securitytracker.com/id/1035596
- http://www.ubuntu.com/usn/USN-2963-1
- http://www.ubuntu.com/usn/USN-2964-1
- http://www.ubuntu.com/usn/USN-2972-1
- https://access.redhat.com/errata/RHSA-2016:1430
- https://access.redhat.com/errata/RHSA-2017:1216
- https://access.redhat.com/security/cve/CVE-2016-0686
- https://linux.oracle.com/cve/CVE-2016-0686.html
- https://linux.oracle.com/errata/ELSA-2016-0723.html
- https://nvd.nist.gov/vuln/detail/CVE-2016-0686
- https://security.gentoo.org/glsa/201606-18
- https://security.netapp.com/advisory/ntap-20160420-0001/
- https://ubuntu.com/security/notices/USN-2963-1
- https://ubuntu.com/security/notices/USN-2964-1
- https://ubuntu.com/security/notices/USN-2972-1
- https://www.cve.org/CVERecord?id=CVE-2016-0686