kritik
CVE-2016-3606
OpenJDK: insufficient bytecode verification (Hotspot, 8155981)
En geç 24 Eki 2026, 07:11 UTC tarihinden beri Trivy database'indeO derlemeden önce ne zaman girdiği kayıtlı değil.
Kaynağa göre önem derecesi
NVD9.6CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Red Hat8.8CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD, Red Hat. Daha düşük diyenler: Amazon (yüksek), Oracle (yüksek), Ubuntu (orta).
Açıklama
Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| amazon linux 1 | java-1.6.0-openjdk, java-1.6.0-openjdk-debuginfo, java-1.6.0-openjdk-demo ve 16 tane daha | 1:1.6.0.40-1.13.12.6.75.amzn1 ve 2 tane daha |
| chainguard | openjdk-11-openj9, openjdk-17-openj9, openjdk-21-openj9 ve 3 tane daha | 0.53.0-r0 ve 2 tane daha |
| debian 7 | openjdk-7 | 7u111-2.6.7-1~deb7u1 |
| debian 8 | openjdk-7 | 7u111-2.6.7-1~deb8u1 |
| Oracle Linux 5 | java-1.6.0-openjdk, java-1.6.0-openjdk-demo, java-1.6.0-openjdk-devel ve 7 tane daha | 1:1.6.0.40-1.13.12.4.0.1.el5_11 ve 1 tane daha |
| Oracle Linux 6 | java-1.6.0-openjdk, java-1.6.0-openjdk-demo, java-1.6.0-openjdk-devel ve 19 tane daha | 1:1.6.0.40-1.13.12.6.el6_8 ve 2 tane daha |
| Oracle Linux 7 | java-1.6.0-openjdk, java-1.6.0-openjdk-demo, java-1.6.0-openjdk-devel ve 23 tane daha | 1:1.6.0.40-1.13.12.5.el7_2 ve 2 tane daha |
| ubuntu 12.04 | openjdk-6, openjdk-7 | 6b40-1.13.12-0ubuntu0.12.04.1 ve 1 tane daha |
| ubuntu 14.04 | openjdk-6, openjdk-7 | 6b40-1.13.12-0ubuntu0.14.04.2 ve 1 tane daha |
| ubuntu 15.10 | openjdk-8 | 8u91-b14-3ubuntu1~15.10.1 |
| ubuntu 16.04 | openjdk-8 | 8u91-b14-3ubuntu1~16.04.1 |
| ubuntu 16.04-ESM | openjdk-8 | 8u91-b14-3ubuntu1~16.04.1 |
12 kaynaktaki 92 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| amazon linux 1 | java-1.6.0-openjdk | 1:1.6.0.40-1.13.12.6.75.amzn1 |
| amazon linux 1 | java-1.6.0-openjdk-debuginfo | 1:1.6.0.40-1.13.12.6.75.amzn1 |
| amazon linux 1 | java-1.6.0-openjdk-demo | 1:1.6.0.40-1.13.12.6.75.amzn1 |
| amazon linux 1 | java-1.6.0-openjdk-devel | 1:1.6.0.40-1.13.12.6.75.amzn1 |
| amazon linux 1 | java-1.6.0-openjdk-javadoc | 1:1.6.0.40-1.13.12.6.75.amzn1 |
| amazon linux 1 | java-1.6.0-openjdk-src | 1:1.6.0.40-1.13.12.6.75.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk | 1:1.7.0.111-2.6.7.2.68.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk-debuginfo | 1:1.7.0.111-2.6.7.2.68.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk-demo | 1:1.7.0.111-2.6.7.2.68.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk-devel | 1:1.7.0.111-2.6.7.2.68.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk-javadoc | 1:1.7.0.111-2.6.7.2.68.amzn1 |
| amazon linux 1 | java-1.7.0-openjdk-src | 1:1.7.0.111-2.6.7.2.68.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk | 1:1.8.0.101-3.b13.24.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-debuginfo | 1:1.8.0.101-3.b13.24.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-demo | 1:1.8.0.101-3.b13.24.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-devel | 1:1.8.0.101-3.b13.24.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-headless | 1:1.8.0.101-3.b13.24.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-javadoc | 1:1.8.0.101-3.b13.24.amzn1 |
| amazon linux 1 | java-1.8.0-openjdk-src | 1:1.8.0.101-3.b13.24.amzn1 |
| chainguard | openjdk-11-openj9 | 0.53.0-r0 |
| chainguard | openjdk-17-openj9 | 0.53.0-r0 |
| chainguard | openjdk-21-openj9 | 0.53.0-r0 |
| chainguard | openjdk-25-openj9 | 0.59.0-r1 |
| chainguard | openjdk-26-openj9 | 0.59.0-r1 |
| chainguard | openjdk-8-openj9 | 0.53.0-r1 |
| debian 7 | openjdk-7 | 7u111-2.6.7-1~deb7u1 |
| debian 8 | openjdk-7 | 7u111-2.6.7-1~deb8u1 |
| Oracle Linux 5 | java-1.6.0-openjdk | 1:1.6.0.40-1.13.12.4.0.1.el5_11 |
| Oracle Linux 5 | java-1.6.0-openjdk-demo | 1:1.6.0.40-1.13.12.4.0.1.el5_11 |
| Oracle Linux 5 | java-1.6.0-openjdk-devel | 1:1.6.0.40-1.13.12.4.0.1.el5_11 |
| Oracle Linux 5 | java-1.6.0-openjdk-javadoc | 1:1.6.0.40-1.13.12.4.0.1.el5_11 |
| Oracle Linux 5 | java-1.6.0-openjdk-src | 1:1.6.0.40-1.13.12.4.0.1.el5_11 |
| Oracle Linux 5 | java-1.7.0-openjdk | 1:1.7.0.111-2.6.7.1.0.1.el5_11 |
| Oracle Linux 5 | java-1.7.0-openjdk-demo | 1:1.7.0.111-2.6.7.1.0.1.el5_11 |
| Oracle Linux 5 | java-1.7.0-openjdk-devel | 1:1.7.0.111-2.6.7.1.0.1.el5_11 |
| Oracle Linux 5 | java-1.7.0-openjdk-javadoc | 1:1.7.0.111-2.6.7.1.0.1.el5_11 |
| Oracle Linux 5 | java-1.7.0-openjdk-src | 1:1.7.0.111-2.6.7.1.0.1.el5_11 |
| Oracle Linux 6 | java-1.6.0-openjdk | 1:1.6.0.40-1.13.12.6.el6_8 |
| Oracle Linux 6 | java-1.6.0-openjdk-demo | 1:1.6.0.40-1.13.12.6.el6_8 |
| Oracle Linux 6 | java-1.6.0-openjdk-devel | 1:1.6.0.40-1.13.12.6.el6_8 |
| Oracle Linux 6 | java-1.6.0-openjdk-javadoc | 1:1.6.0.40-1.13.12.6.el6_8 |
| Oracle Linux 6 | java-1.6.0-openjdk-src | 1:1.6.0.40-1.13.12.6.el6_8 |
| Oracle Linux 6 | java-1.7.0-openjdk | 1:1.7.0.111-2.6.7.2.0.1.el6_8 |
| Oracle Linux 6 | java-1.7.0-openjdk-demo | 1:1.7.0.111-2.6.7.2.0.1.el6_8 |
| Oracle Linux 6 | java-1.7.0-openjdk-devel | 1:1.7.0.111-2.6.7.2.0.1.el6_8 |
| Oracle Linux 6 | java-1.7.0-openjdk-javadoc | 1:1.7.0.111-2.6.7.2.0.1.el6_8 |
| Oracle Linux 6 | java-1.7.0-openjdk-src | 1:1.7.0.111-2.6.7.2.0.1.el6_8 |
| Oracle Linux 6 | java-1.8.0-openjdk | 1:1.8.0.101-3.b13.el6_8 |
| Oracle Linux 6 | java-1.8.0-openjdk-debug | 1:1.8.0.101-3.b13.el6_8 |
| Oracle Linux 6 | java-1.8.0-openjdk-demo | 1:1.8.0.101-3.b13.el6_8 |
| Oracle Linux 6 | java-1.8.0-openjdk-demo-debug | 1:1.8.0.101-3.b13.el6_8 |
| Oracle Linux 6 | java-1.8.0-openjdk-devel | 1:1.8.0.101-3.b13.el6_8 |
| Oracle Linux 6 | java-1.8.0-openjdk-devel-debug | 1:1.8.0.101-3.b13.el6_8 |
| Oracle Linux 6 | java-1.8.0-openjdk-headless | 1:1.8.0.101-3.b13.el6_8 |
| Oracle Linux 6 | java-1.8.0-openjdk-headless-debug | 1:1.8.0.101-3.b13.el6_8 |
| Oracle Linux 6 | java-1.8.0-openjdk-javadoc | 1:1.8.0.101-3.b13.el6_8 |
| Oracle Linux 6 | java-1.8.0-openjdk-javadoc-debug | 1:1.8.0.101-3.b13.el6_8 |
| Oracle Linux 6 | java-1.8.0-openjdk-src | 1:1.8.0.101-3.b13.el6_8 |
| Oracle Linux 6 | java-1.8.0-openjdk-src-debug | 1:1.8.0.101-3.b13.el6_8 |
| Oracle Linux 7 | java-1.6.0-openjdk | 1:1.6.0.40-1.13.12.5.el7_2 |
| Oracle Linux 7 | java-1.6.0-openjdk-demo | 1:1.6.0.40-1.13.12.5.el7_2 |
| Oracle Linux 7 | java-1.6.0-openjdk-devel | 1:1.6.0.40-1.13.12.5.el7_2 |
| Oracle Linux 7 | java-1.6.0-openjdk-javadoc | 1:1.6.0.40-1.13.12.5.el7_2 |
| Oracle Linux 7 | java-1.6.0-openjdk-src | 1:1.6.0.40-1.13.12.5.el7_2 |
| Oracle Linux 7 | java-1.7.0-openjdk | 1:1.7.0.111-2.6.7.2.0.1.el7_2 |
| Oracle Linux 7 | java-1.7.0-openjdk-accessibility | 1:1.7.0.111-2.6.7.2.0.1.el7_2 |
| Oracle Linux 7 | java-1.7.0-openjdk-demo | 1:1.7.0.111-2.6.7.2.0.1.el7_2 |
| Oracle Linux 7 | java-1.7.0-openjdk-devel | 1:1.7.0.111-2.6.7.2.0.1.el7_2 |
| Oracle Linux 7 | java-1.7.0-openjdk-headless | 1:1.7.0.111-2.6.7.2.0.1.el7_2 |
| Oracle Linux 7 | java-1.7.0-openjdk-javadoc | 1:1.7.0.111-2.6.7.2.0.1.el7_2 |
| Oracle Linux 7 | java-1.7.0-openjdk-src | 1:1.7.0.111-2.6.7.2.0.1.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk | 1:1.8.0.101-3.b13.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-accessibility | 1:1.8.0.101-3.b13.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-accessibility-debug | 1:1.8.0.101-3.b13.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-debug | 1:1.8.0.101-3.b13.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-demo | 1:1.8.0.101-3.b13.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-demo-debug | 1:1.8.0.101-3.b13.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-devel | 1:1.8.0.101-3.b13.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-devel-debug | 1:1.8.0.101-3.b13.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-headless | 1:1.8.0.101-3.b13.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-headless-debug | 1:1.8.0.101-3.b13.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-javadoc | 1:1.8.0.101-3.b13.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-javadoc-debug | 1:1.8.0.101-3.b13.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-src | 1:1.8.0.101-3.b13.el7_2 |
| Oracle Linux 7 | java-1.8.0-openjdk-src-debug | 1:1.8.0.101-3.b13.el7_2 |
| ubuntu 12.04 | openjdk-6 | 6b40-1.13.12-0ubuntu0.12.04.1 |
| ubuntu 12.04 | openjdk-7 | 7u111-2.6.7-0ubuntu0.12.04.2 |
| ubuntu 14.04 | openjdk-6 | 6b40-1.13.12-0ubuntu0.14.04.2 |
| ubuntu 14.04 | openjdk-7 | 7u111-2.6.7-0ubuntu0.14.04.3 |
| ubuntu 15.10 | openjdk-8 | 8u91-b14-3ubuntu1~15.10.1 |
| ubuntu 16.04 | openjdk-8 | 8u91-b14-3ubuntu1~16.04.1 |
| ubuntu 16.04-ESM | openjdk-8 | 8u91-b14-3ubuntu1~16.04.1 |
Referanslar
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00011.html
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.html
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00032.html
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00034.html
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00035.html
- http://lists.opensuse.org/opensuse-updates/2016-08/msg00028.html
- http://rhn.redhat.com/errata/RHSA-2016-1504.html
34 referansın hepsi
- http://rhn.redhat.com/errata/RHSA-2016-1776.html
- http://www.debian.org/security/2016/dsa-3641
- http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
- http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html#AppendixJAVA
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html
- http://www.securityfocus.com/bid/91787
- http://www.securityfocus.com/bid/91912
- http://www.securitytracker.com/id/1036365
- http://www.ubuntu.com/usn/USN-3043-1
- http://www.ubuntu.com/usn/USN-3062-1
- http://www.ubuntu.com/usn/USN-3077-1
- https://access.redhat.com/errata/RHSA-2016:1458
- https://access.redhat.com/errata/RHSA-2016:1475
- https://access.redhat.com/errata/RHSA-2016:1476
- https://access.redhat.com/security/cve/CVE-2016-3606
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-3606
- https://linux.oracle.com/cve/CVE-2016-3606.html
- https://linux.oracle.com/errata/ELSA-2016-1776.html
- https://nvd.nist.gov/vuln/detail/CVE-2016-3606
- https://security.gentoo.org/glsa/201610-08
- https://security.gentoo.org/glsa/201701-43
- https://security.netapp.com/advisory/ntap-20160721-0001/
- https://ubuntu.com/security/notices/USN-3043-1
- https://ubuntu.com/security/notices/USN-3062-1
- https://ubuntu.com/security/notices/USN-3077-1
- https://www.cve.org/CVERecord?id=CVE-2016-3606