CVE-2016-3606

Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.6 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
oracleCNA
---
---
CVEADP
---
---
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 85%
VendorProductVersion
oraclelinux
5.0
oraclelinux
6.0
oraclelinux
7.0
oraclejdk
1.7.0
oraclejdk
1.8.0
oraclejdk
1.8.0
oraclejre
1.7.0
oraclejre
1.8.0
oraclejre
1.8.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
openjdk-8
sid
8u432-b06-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
icedtea-web
xenial
not-affected
wily
not-affected
trusty
dne
precise
not-affected
openjdk-6
xenial
dne
wily
ignored
trusty
Fixed 6b40-1.13.12-0ubuntu0.14.04.2
released
precise
Fixed 6b40-1.13.12-0ubuntu0.12.04.1
released
openjdk-7
xenial
dne
wily
ignored
trusty
Fixed 7u111-2.6.7-0ubuntu0.14.04.3
released
precise
Fixed 7u111-2.6.7-0ubuntu0.12.04.2
released
openjdk-8
xenial
Fixed 8u91-b14-3ubuntu1~16.04.1
released
wily
Fixed 8u91-b14-3ubuntu1~15.10.1
released
trusty
dne
precise
dne
References