CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS
Percentile
93.5%
Unspecified vulnerability in the Java SE and Java SE Embedded components in
Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows
remote attackers to affect confidentiality, integrity, and availability via
unknown vectors related to 2D.
Author | Note |
---|---|
mdeslaur | introduced as part of the CVE-2015-4844 fix |
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 12.04 | noarch | icu | < 4.8.1.1-3ubuntu0.7 | UNKNOWN |
ubuntu | 14.04 | noarch | icu | < 52.1-3ubuntu0.5 | UNKNOWN |
ubuntu | 16.04 | noarch | icu | < 55.1-7ubuntu0.1 | UNKNOWN |
ubuntu | 12.04 | noarch | openjdk-6 | < 6b38-1.13.10-0ubuntu0.12.04.1 | UNKNOWN |
ubuntu | 14.04 | noarch | openjdk-6 | < 6b38-1.13.10-0ubuntu0.14.04.1 | UNKNOWN |
ubuntu | 15.04 | noarch | openjdk-6 | < 6b38-1.13.10-0ubuntu0.15.04.1 | UNKNOWN |
ubuntu | 15.10 | noarch | openjdk-6 | < 6b38-1.13.10-0ubuntu0.15.10.1 | UNKNOWN |
ubuntu | 12.04 | noarch | openjdk-7 | < 7u95-2.6.4-0ubuntu0.12.04.1 | UNKNOWN |
ubuntu | 14.04 | noarch | openjdk-7 | < 7u95-2.6.4-0ubuntu0.14.04.1 | UNKNOWN |
ubuntu | 15.04 | noarch | openjdk-7 | < 7u95-2.6.4-0ubuntu0.15.04.1 | UNKNOWN |
www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
launchpad.net/bugs/cve/CVE-2016-0494
nvd.nist.gov/vuln/detail/CVE-2016-0494
security-tracker.debian.org/tracker/CVE-2016-0494
ubuntu.com/security/notices/USN-2884-1
ubuntu.com/security/notices/USN-2885-1
ubuntu.com/security/notices/USN-3227-1
www.cve.org/CVERecord?id=CVE-2016-0494