USN-3179-1: OpenJDK 8 vulnerabilities

🗓️ 25 Jan 2017 21:05:13Reported by UbuntuType

ubuntu🔗 ubuntu.com👁 114 Views

OpenJDK 8 vulnerabilities identified in Ubuntu 16.04 ESM and 16.10, leading to remote attacks, potential data exposure, and denial of service

Reporter	Title	Published	Views	Family All 1153
0day.today	Oracle OpenJDK Runtime Environment Build 1.8.0_112-b15 Denial Of Service Exploit	23 Jan 201700:00	–	zdt
0day.today	Oracle Java Uninitialized Memory Remote Code Execution Vulnerability	6 Feb 201700:00	–	zdt
0day.today	Oracle Java AtomicReferenceFieldUpdater Type Confusion Remote Code Execution Vulnerability	6 Feb 201700:00	–	zdt
0day.today	IBM Informix Dynamic Server / Informix Open Admin Tool - DLL Injection / Remote Code Execution / Hea	31 May 201700:00	–	zdt
RedhatCVE	CVE-2016-5546	17 Jan 201721:47	–	redhatcve
RedhatCVE	CVE-2023-0296	16 Jan 202314:05	–	redhatcve
RedHat Linux	Critical: Red Hat Security Advisory: java-1.7.1-ibm security update	28 Feb 201708:19	–	redhat
RedHat Linux	SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32)	28 Feb 201708:19	–	redhat
RedHat Linux	OpenJDK: incorrect ECDSA signature extraction from the DER input (Libraries, 8168714)	28 Feb 201708:19	–	redhat
RedHat Linux	OpenJDK: missing ObjectIdentifier length check (Libraries, 8168705)	28 Feb 201708:19	–	redhat

OS	OS Version	Architecture	Package	Package Version	Filename
Ubuntu	16.04	all	openjdk-8-demo	8u121-b13-0ubuntu1.16.04.2	openjdk-8-demo_8u121-b13-0ubuntu1.16.04.2_all.deb
Ubuntu	16.10	all	openjdk-8-jdk	8u121-b13-0ubuntu1.16.10.2	openjdk-8-jdk_8u121-b13-0ubuntu1.16.10.2_all.deb

25 Jan 2017 21:05Current

7.4High risk

Vulners AI Score7.4

CVSS 26.8

CVSS 3.17.5

CVSS 39.6

EPSS0.95707

SSVC