2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2016-0636" ,
"sourceIdentifier" : "secalert_us@oracle.com" ,
"published" : "2016-03-24T18:59:00.120" ,
2024-11-23 05:11:48 +00:00
"lastModified" : "2024-11-21T02:42:03.727" ,
2023-04-24 12:24:31 +02:00
"vulnStatus" : "Modified" ,
2024-12-08 03:06:42 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "Unspecified vulnerability in Oracle Java SE 7u97, 8u73, and 8u74 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to the Hotspot sub-component."
} ,
{
"lang" : "es" ,
"value" : "Vulnerabilidad no especificada en Oracle Java SE 7u97, 8u73 y 8u74 permite a atacantes remotos afectar a la confidencialidad, integridad y disponibilidad a trav\u00e9s de vectores desconocidos relacionados con el subcomponente Hotspot."
}
] ,
"metrics" : {
"cvssMetricV30" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.0" ,
"vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" ,
2024-11-23 05:11:48 +00:00
"baseScore" : 8.1 ,
"baseSeverity" : "HIGH" ,
2023-04-24 12:24:31 +02:00
"attackVector" : "NETWORK" ,
"attackComplexity" : "HIGH" ,
"privilegesRequired" : "NONE" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "HIGH" ,
2024-11-23 05:11:48 +00:00
"availabilityImpact" : "HIGH"
2023-04-24 12:24:31 +02:00
} ,
"exploitabilityScore" : 2.2 ,
"impactScore" : 5.9
}
] ,
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C" ,
2024-11-23 05:11:48 +00:00
"baseScore" : 9.3 ,
2023-04-24 12:24:31 +02:00
"accessVector" : "NETWORK" ,
"accessComplexity" : "MEDIUM" ,
"authentication" : "NONE" ,
"confidentialityImpact" : "COMPLETE" ,
"integrityImpact" : "COMPLETE" ,
2024-11-23 05:11:48 +00:00
"availabilityImpact" : "COMPLETE"
2023-04-24 12:24:31 +02:00
} ,
"baseSeverity" : "HIGH" ,
"exploitabilityScore" : 8.6 ,
"impactScore" : 10.0 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : false ,
"userInteractionRequired" : false
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "NVD-CWE-noinfo"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C2FAC325-6EEB-466D-9EBA-8ED4DBC9CFBF"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "3C84489B-B08C-4854-8A12-D01B6E45CF79"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
}
]
}
]
} ,
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:redhat:icedtea7:*:*:*:*:*:*:*:*" ,
"versionEndIncluding" : "2.6.6" ,
"matchCriteriaId" : "5135E87C-74A2-4CC0-A08E-7CE4224FBDE9"
}
]
}
]
} ,
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update97:*:*:*:*:*:*" ,
"matchCriteriaId" : "9F65C05E-84C6-47E9-80D2-00C4EAD3298F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update73:*:*:*:*:*:*" ,
"matchCriteriaId" : "98B69D8A-14A9-4322-967A-9CACC2EBB05E"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update74:*:*:*:*:*:*" ,
"matchCriteriaId" : "0B1C656A-7501-4417-9959-F21FFD85B512"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:oracle:jre:1.7.0:update97:*:*:*:*:*:*" ,
"matchCriteriaId" : "DD45A07E-499A-4B9B-842D-9A574D36C96C"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update73:*:*:*:*:*:*" ,
"matchCriteriaId" : "62F92EDB-9B75-4B3D-9F65-C51BD16290E4"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update74:*:*:*:*:*:*" ,
"matchCriteriaId" : "C92F4008-8AC7-4E30-A03B-F005A853E8C1"
}
]
}
]
}
] ,
"references" : [
{
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00003.html" ,
"source" : "secalert_us@oracle.com"
} ,
{
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00004.html" ,
"source" : "secalert_us@oracle.com"
} ,
{
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00005.html" ,
"source" : "secalert_us@oracle.com"
} ,
{
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00007.html" ,
"source" : "secalert_us@oracle.com"
} ,
{
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00008.html" ,
"source" : "secalert_us@oracle.com"
} ,
{
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00013.html" ,
"source" : "secalert_us@oracle.com"
} ,
{
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00014.html" ,
"source" : "secalert_us@oracle.com"
} ,
{
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00035.html" ,
"source" : "secalert_us@oracle.com"
} ,
{
"url" : "http://rhn.redhat.com/errata/RHSA-2016-0511.html" ,
"source" : "secalert_us@oracle.com"
} ,
{
"url" : "http://rhn.redhat.com/errata/RHSA-2016-0512.html" ,
"source" : "secalert_us@oracle.com"
} ,
{
"url" : "http://rhn.redhat.com/errata/RHSA-2016-0513.html" ,
"source" : "secalert_us@oracle.com"
} ,
{
"url" : "http://rhn.redhat.com/errata/RHSA-2016-0514.html" ,
"source" : "secalert_us@oracle.com"
} ,
{
"url" : "http://rhn.redhat.com/errata/RHSA-2016-0515.html" ,
"source" : "secalert_us@oracle.com"
} ,
{
"url" : "http://rhn.redhat.com/errata/RHSA-2016-0516.html" ,
"source" : "secalert_us@oracle.com" ,
"tags" : [
"Third Party Advisory"
]
} ,
{
"url" : "http://www.debian.org/security/2016/dsa-3558" ,
"source" : "secalert_us@oracle.com"
} ,
{
"url" : "http://www.oracle.com/technetwork/topics/security/alert-cve-2016-0636-2949497.html" ,
"source" : "secalert_us@oracle.com" ,
"tags" : [
"Vendor Advisory"
]
} ,
{
"url" : "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html" ,
"source" : "secalert_us@oracle.com" ,
"tags" : [
"Vendor Advisory"
]
} ,
{
"url" : "http://www.securityfocus.com/bid/85376" ,
"source" : "secalert_us@oracle.com"
} ,
{
"url" : "http://www.securitytracker.com/id/1035401" ,
"source" : "secalert_us@oracle.com"
} ,
{
"url" : "http://www.ubuntu.com/usn/USN-2942-1" ,
"source" : "secalert_us@oracle.com"
} ,
{
"url" : "https://security.gentoo.org/glsa/201606-18" ,
"source" : "secalert_us@oracle.com" ,
"tags" : [
"Third Party Advisory"
]
} ,
{
"url" : "https://security.gentoo.org/glsa/201610-08" ,
"source" : "secalert_us@oracle.com"
} ,
{
"url" : "https://security.netapp.com/advisory/ntap-20160328-0001/" ,
"source" : "secalert_us@oracle.com"
2024-11-23 05:11:48 +00:00
} ,
{
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00003.html" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00004.html" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00005.html" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00007.html" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00008.html" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00013.html" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00014.html" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00035.html" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://rhn.redhat.com/errata/RHSA-2016-0511.html" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://rhn.redhat.com/errata/RHSA-2016-0512.html" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://rhn.redhat.com/errata/RHSA-2016-0513.html" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://rhn.redhat.com/errata/RHSA-2016-0514.html" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://rhn.redhat.com/errata/RHSA-2016-0515.html" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://rhn.redhat.com/errata/RHSA-2016-0516.html" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Third Party Advisory"
]
} ,
{
"url" : "http://www.debian.org/security/2016/dsa-3558" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://www.oracle.com/technetwork/topics/security/alert-cve-2016-0636-2949497.html" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Vendor Advisory"
]
} ,
{
"url" : "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Vendor Advisory"
]
} ,
{
"url" : "http://www.securityfocus.com/bid/85376" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://www.securitytracker.com/id/1035401" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://www.ubuntu.com/usn/USN-2942-1" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "https://security.gentoo.org/glsa/201606-18" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Third Party Advisory"
]
} ,
{
"url" : "https://security.gentoo.org/glsa/201610-08" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "https://security.netapp.com/advisory/ntap-20160328-0001/" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
2023-04-24 12:24:31 +02:00
}
]
}