CVE-2016-3498

Aliases:DEBIAN-CVE-2016-3498CGA-2cqx-fj52-mh75CGA-2v6g-q2hc-q8wpCGA-3776-g7h9-chhrCGA-37pv-324v-rhmjCGA-3g9r-v29f-rhh8CGA-4cjw-r5mg-8vx6CGA-54gf-xvpq-qgq9CGA-5887-vx7f-66p4CGA-63cp-p4c4-qxrgCGA-68vh-8fmm-75h9CGA-6pv7-pvrf-j2m3CGA-8f5v-25x3-pvvcCGA-8g6g-h4xg-jx9xCGA-8rfv-9q7v-jq27CGA-9q5v-425q-qpv4CGA-c6hh-8j4g-6ghvCGA-fxjj-v7v6-vvhhCGA-gm78-jf86-mvxhCGA-gq92-mgxp-2pr2CGA-gxcr-jw4r-fxx9CGA-h3r9-8xcq-5qxvCGA-h3x4-9vj3-7wcwCGA-hrx9-q8mg-jcpmCGA-jp8x-gq3q-j7qwCGA-pchx-vwj8-x9xrCGA-pcq8-7cx6-vxvxCGA-prfg-cjqx-3vhvCGA-v5w2-wvw4-34h2CGA-vr78-cvpf-wrr5CGA-wh6q-3xgh-fcqmCGA-wr8w-9j47-j6j4CGA-xg67-v6p6-6756
Advisory lineage Upstream: 0 Downstream: 7
Modified
Published: 21 Jul 2016, 10:00
Last modified:11 Oct 2024, 20:53

Vulnerability Summary

Overall Risk (default)
low
22/100
CVSS Score
5.3 MEDIUM
v3.0 (nvd)
EPSS Score
4.8% LOW
5% probability -2.97%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

21 Jul 2016, 10:00
Published
Vulnerability first disclosed
11 Oct 2024, 20:53
Last Modified
Vulnerability information updated

Description

Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 allows remote attackers to affect availability via vectors related to JavaFX.

CVSS Metrics

  • v3.0•MEDIUM•Score: 5.3CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
  • v2.0•MEDIUM•Score: 5AV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS Trends

Current EPSS score: 4.80%• Percentile: 92%

Affected Systems

  • chainguard•openjdk-11-openj9-default-policy

    < 0.53.0-r0

  • chainguard•openjdk-17-openj9-default-policy

    < 0.53.0-r0

  • chainguard•openjdk-21-openj9-default-policy

    < 0.53.0-r0

  • chainguard•openjdk-25-openj9

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-jmods

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-jre

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-jmods

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-jre

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-dbg

    < 0.53.0-r1

  • debian•openjfx

    < 8u102-b14-1 | < 8u102-b14-1 | < 8u102-b14-1

  • oracle•jdk

    1.7.0:update101 | 1.8.0:update92

  • oracle•jre

    1.7.0:update101 | 1.8.0:update92

References (16)