CVE-2016-3485
Aliases:CGA-26j8-82xj-8v72CGA-2vhw-h8gq-34w5CGA-35qh-qc77-3c36CGA-437v-2hwg-cqrfCGA-4vwj-8h46-cwrhCGA-574w-92cv-q68rCGA-5v6w-jg3p-9pcjCGA-692r-w7r2-93g9CGA-925c-g9x5-9x46CGA-9j8h-4mfp-j9c3CGA-9rrh-jrxg-c888CGA-9rrp-rxv2-jrwpCGA-9wwh-6m46-hxw7CGA-cf6m-v7hv-xg9gCGA-cf98-j4fr-c3v4CGA-gw84-h7fc-9p7qCGA-hm3p-fh3w-xqpxCGA-jh72-5v53-qq4mCGA-jm74-2h36-pvw7CGA-jrpm-7w4q-49jfCGA-m52g-m7j6-fvggCGA-m8f3-hf82-fwxpCGA-mg64-pwj4-xq5pCGA-mhvw-2qmx-h8q3CGA-p3jg-5747-42p3CGA-p8c9-hp98-hc2pCGA-qf4v-8p9w-4852CGA-qmcx-mv7c-6fxpCGA-vjfr-rmj5-jc6qCGA-wm9h-6qfv-rfg8CGA-wrcc-23fp-7crwCGA-xg7m-w892-3387
Advisory lineage Upstream: 0 Downstream: 10
Modified
Published: 21 Jul 2016, 10:00
Last modified:11 Oct 2024, 20:54
Vulnerability Summary
Overall Risk (default)
low
12/100 CVSS Score
2.9 LOW
v3.0 (nvd)
EPSS Score
0.45% LOW
0% probability +0.41%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
21 Jul 2016, 10:00
Published
Vulnerability first disclosed
11 Oct 2024, 20:54
Last Modified
Vulnerability information updated
Description
Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows local users to affect integrity via vectors related to Networking.
CVSS Metrics
- v3.0•LOW•Score: 2.9CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
- v2.0•LOW•Score: 2.1AV:L/AC:L/Au:N/C:N/I:P/A:N
EPSS Trends
Current EPSS score: 0.45%• Percentile: 39%
Affected Systems
- chainguard•openjdk-11-openj9-default-policy
< 0.53.0-r0
- chainguard•openjdk-17-openj9-default-policy
< 0.53.0-r0
- chainguard•openjdk-21-openj9-default-policy
< 0.53.0-r0
- chainguard•openjdk-25-openj9
< 0.59.0-r1
- chainguard•openjdk-25-openj9-dbg
< 0.59.0-r1
- chainguard•openjdk-25-openj9-default-jdk
< 0.59.0-r1
- chainguard•openjdk-25-openj9-default-jvm
< 0.59.0-r1
- chainguard•openjdk-25-openj9-jmods
< 0.59.0-r1
- chainguard•openjdk-25-openj9-jre
< 0.59.0-r1
- chainguard•openjdk-26-openj9
< 0.59.0-r1
- chainguard•openjdk-26-openj9-dbg
< 0.59.0-r1
- chainguard•openjdk-26-openj9-default-jdk
< 0.59.0-r1
- chainguard•openjdk-26-openj9-default-jvm
< 0.59.0-r1
- chainguard•openjdk-26-openj9-jmods
< 0.59.0-r1
- chainguard•openjdk-26-openj9-jre
< 0.59.0-r1
- chainguard•openjdk-8-openj9-dbg
< 0.53.0-r1
- oracle•jdk
1.6.0:update115 | 1.7.0:update101 | 1.8.0:update91 | 1.8.0:update92
- oracle•jre
1.6.0:update115 | 1.7.0:update101 | 1.8.0:update91 | 1.8.0:update92
- oracle•jrockit
r28.3.10
References (16)
- http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00005.html
- http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
- https://security.gentoo.org/glsa/201610-08
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.html
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00034.html
- https://security.netapp.com/advisory/ntap-20160721-0001/
- http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00033.html
- http://www.securitytracker.com/id/1036365
- https://security.gentoo.org/glsa/201701-43
- http://www.securityfocus.com/bid/91787
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00011.html
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00032.html
- https://kc.mcafee.com/corporate/index?page=content&id=SB10166
- http://lists.opensuse.org/opensuse-updates/2016-08/msg00028.html
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00035.html