CVE-2016-3587 Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot.
CriticalCVSS 9.6
EPSS 5.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle linux | = 6 | No fix listed |
| oracle linux | = 7 | No fix listed |
| oracle jdk | = 1.8.0-update91 | No fix listed |
| oracle jdk | = 1.8.0-update92 | No fix listed |
| oracle jre | = 1.8.0-update91 | No fix listed |
| oracle jre | = 1.8.0-update92 | No fix listed |
References
- SUSE-SU-2016:2012 vendor-advisory
- openSUSE-SU-2016:2051 vendor-advisory
- openSUSE-SU-2016:1979 vendor-advisory
- www.oracle.com patch vendor-advisory
- www.oracle.com vendor-advisory
- 91787 third-party-advisory vdb-entry
- 91904 vdb-entry
- 1036365 vdb-entry
- USN-3043-1 vendor-advisory
- RHSA-2016:1458 vendor-advisory
- RHSA-2016:1475 vendor-advisory
- GLSA-201610-08 vendor-advisory
- GLSA-201701-43 vendor-advisory
- security.netapp.com