CVE-2016-3500

Published: Jul 21, 2016Modified: May 6, 2026

5.3

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2016-3508.

Affected (12)

Products: Oracle: Linux, Jdk, Jre, Jrockit

4 products

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Oracle Linux	Version 5.0
Oracle Linux	Version 6
Oracle Linux	Version 7

Configuration B

9 vulnerable

Vulnerable Software	Affected Versions
Oracle Jdk	Version 1.6.0 update115
Oracle Jdk	Version 1.7.0 update101
Oracle Jdk	Version 1.8.0 update91
Oracle Jdk	Version 1.8.0 update92
Oracle Jre	Version 1.6.0 update115
Oracle Jre	Version 1.7.0 update101
Oracle Jre	Version 1.8.0 update91
Oracle Jre	Version 1.8.0 update92
Oracle Jrockit	Version r28.3.10

References (50)

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00011.html

Source: secalert_us@oracle.com

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.html

Source: secalert_us@oracle.com

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00032.html

Source: secalert_us@oracle.com

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00033.html

Source: secalert_us@oracle.com

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00034.html

Source: secalert_us@oracle.com

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00035.html

Source: secalert_us@oracle.com

http://lists.opensuse.org/opensuse-updates/2016-08/msg00028.html

Source: secalert_us@oracle.com

http://rhn.redhat.com/errata/RHSA-2016-1504.html

Source: secalert_us@oracle.com

http://rhn.redhat.com/errata/RHSA-2016-1776.html

Source: secalert_us@oracle.com

http://www.debian.org/security/2016/dsa-3641

Source: secalert_us@oracle.com

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Source: secalert_us@oracle.com

PatchVendor Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html

Source: secalert_us@oracle.com

Vendor Advisory

http://www.securityfocus.com/bid/91787

Source: secalert_us@oracle.com

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1036365

Source: secalert_us@oracle.com

http://www.ubuntu.com/usn/USN-3043-1

Source: secalert_us@oracle.com

http://www.ubuntu.com/usn/USN-3062-1

Source: secalert_us@oracle.com

http://www.ubuntu.com/usn/USN-3077-1

Source: secalert_us@oracle.com

https://access.redhat.com/errata/RHSA-2016:1458

Source: secalert_us@oracle.com

https://access.redhat.com/errata/RHSA-2016:1475

Source: secalert_us@oracle.com

https://access.redhat.com/errata/RHSA-2016:1476

Source: secalert_us@oracle.com

https://access.redhat.com/errata/RHSA-2016:1477

Source: secalert_us@oracle.com

https://kc.mcafee.com/corporate/index?page=content&id=SB10166

Source: secalert_us@oracle.com

https://security.gentoo.org/glsa/201610-08

Source: secalert_us@oracle.com

https://security.gentoo.org/glsa/201701-43

Source: secalert_us@oracle.com

https://security.netapp.com/advisory/ntap-20160721-0001/

Source: secalert_us@oracle.com

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00011.html