Vulnerability Description
Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot.
CVSS Score
9.6
CRITICAL
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Linux | 6 |
| Oracle | Jdk | 1.8.0 |
| Oracle | Jre | 1.8.0 |
References
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.html
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00033.html
- http://lists.opensuse.org/opensuse-updates/2016-08/msg00028.html
- http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.htmlPatchVendor Advisory
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.hVendor Advisory
- http://www.securityfocus.com/bid/91787Third Party AdvisoryVDB Entry
- http://www.securityfocus.com/bid/91904
- http://www.securitytracker.com/id/1036365
- http://www.ubuntu.com/usn/USN-3043-1
- https://access.redhat.com/errata/RHSA-2016:1458
- https://access.redhat.com/errata/RHSA-2016:1475
- https://security.gentoo.org/glsa/201610-08
- https://security.gentoo.org/glsa/201701-43
- https://security.netapp.com/advisory/ntap-20160721-0001/
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.html
FAQ
What is CVE-2016-3587?
CVE-2016-3587 is a vulnerability with a CVSS score of 9.6 (CRITICAL). Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot.
How severe is CVE-2016-3587?
CVE-2016-3587 has been rated CRITICAL with a CVSS base score of 9.6/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2016-3587?
Check the references section above for vendor advisories and patch information. Affected products include: Oracle Linux, Oracle Jdk, Oracle Jre.