CVE-2016-3458

Publication date 21 July 2016

Last updated 24 July 2024

Ubuntu priority

Cvss 3 Severity Score

Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; and Java SE Embedded 8u91 allows remote attackers to affect integrity via vectors related to CORBA.

From the Ubuntu Security Team

A vulnerability was discovered in the OpenJDK JRE related to data integrity. An attacker could exploit this to expose sensitive data over the network or possibly execute arbitrary code.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
icedtea-web	16.04 LTS xenial	Not affected
	15.10 wily	Not affected
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not affected
openjdk-6	16.04 LTS xenial	Not in release
	15.10 wily	Ignored end of life
	14.04 LTS trusty	Fixed 6b40-1.13.12-0ubuntu0.14.04.2
	12.04 LTS precise	Fixed 6b40-1.13.12-0ubuntu0.12.04.1
openjdk-7	16.04 LTS xenial	Not in release
	15.10 wily	Ignored end of life
	14.04 LTS trusty	Fixed 7u111-2.6.7-0ubuntu0.14.04.3
	12.04 LTS precise	Fixed 7u111-2.6.7-0ubuntu0.12.04.2
openjdk-8	16.04 LTS xenial	Fixed 8u91-b14-3ubuntu1~16.04.1
	15.10 wily	Fixed 8u91-b14-3ubuntu1~15.10.1
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not in release

Severity score breakdown

Parameter	Value
Base score	4.3 · Medium
Attack vector	Network
Attack complexity	Low
Privileges required	None
User interaction	Required
Scope	Unchanged
Confidentiality	None
Integrity impact	Low
Availability impact	None
Vector	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

References

Related Ubuntu Security Notices (USN)

USN-3043-1
OpenJDK 8 vulnerabilities
27 July 2016

USN-3062-1
OpenJDK 7 vulnerabilities
16 August 2016

USN-3077-1
OpenJDK 6 vulnerabilities
12 September 2016