CVE-2016-0466

Aliases:CGA-2279-4255-rw68CGA-27xh-v459-mqg7CGA-295j-w5mf-7792CGA-2ggq-35gq-fr85CGA-2wwv-8466-j97hCGA-2wxh-7jjr-p8jrCGA-3jw5-w75g-3w7vCGA-4357-r2j4-4mf9CGA-43c8-g92m-jp7hCGA-4rjj-gjf9-r6c8CGA-4wf5-x2x9-2qcrCGA-5358-h85f-jccrCGA-7j3x-mf8g-px29CGA-8j35-jg85-8rx8CGA-8rjq-j2wm-455gCGA-8rph-p9h5-gf2hCGA-8w3g-fvv9-2w98CGA-94x9-76gf-hh8vCGA-9m4j-g75q-q39cCGA-c9xq-p635-29hwCGA-cjq4-wp72-7m9mCGA-gjw8-g4q2-jjjvCGA-gvrc-rx6f-7mwpCGA-hw44-84hx-jfw3CGA-j9fx-xwwc-9c5vCGA-mgpx-q95g-77fpCGA-pw9h-3fjm-h76gCGA-q66g-mm35-cp48CGA-r2m5-xrc4-x76pCGA-vjvj-rhw2-4jfmCGA-vxw6-88wp-v2p5CGA-wph2-2pr3-2fmv
Advisory lineage Upstream: 0 Downstream: 32
Modified
Published: 21 Jan 2016, 02:00
Last modified:05 Aug 2024, 22:22

Vulnerability Summary

Overall Risk (default)
low
21/100
CVSS Score
5 MEDIUM
v2.0 (nvd)
EPSS Score
5.45% LOW
5% probability +1.22%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

21 Jan 2016, 02:00
Published
Vulnerability first disclosed
05 Aug 2024, 22:22
Last Modified
Vulnerability information updated

Description

Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect availability via vectors related to JAXP.

CVSS Metrics

  • v2.0•MEDIUM•Score: 5AV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS Trends

Current EPSS score: 5.45%• Percentile: 92%

Affected Systems

  • chainguard•openjdk-11-openj9-default-policy

    < 0.53.0-r0

  • chainguard•openjdk-17-openj9-default-policy

    < 0.53.0-r0

  • chainguard•openjdk-21-openj9-default-policy

    < 0.53.0-r0

  • chainguard•openjdk-25-openj9

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-jmods

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-jre

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-jmods

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-jre

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-dbg

    < 0.53.0-r1

  • canonical•ubuntu_linux

    12.04 | 14.04 | 15.04 | 15.10

  • oracle•jdk

    1.6.0:update105 | 1.7.0:update91 | 1.8.0:update66

  • oracle•jre

    1.6.0:update105 | 1.7.0:update91 | 1.8.0:update66

References (28)