Executive Summary

Summary
Title OpenJDK 8 vulnerabilities
Informations
Name USN-3043-1 First vendor Publication 2016-07-27
Vendor Ubuntu Last vendor Modification 2016-07-27
Severity (Vendor) N/A Revision N/A

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score 9.3 Attack Range Network
Cvss Impact Score 10 Attack Complexity Medium
Cvss Expoit Score 8.6 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 16.04 LTS

Summary:

Several security issues were fixed in OpenJDK 8.

Software Description: - openjdk-8: Open Source Java implementation

Details:

Multiple vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity, and availability. An attacker could exploit these to cause a denial of service, expose sensitive data over the network, or possibly execute arbitrary code. (CVE-2016-3587, CVE-2016-3598, CVE-2016-3606, CVE-2016-3610)

A vulnerability was discovered in the OpenJDK JRE related to data integrity. An attacker could exploit this to expose sensitive data over the network or possibly execute arbitrary code. (CVE-2016-3458)

Multiple vulnerabilities were discovered in the OpenJDK JRE related to availability. An attacker could exploit these to cause a denial of service. (CVE-2016-3500, CVE-2016-3508)

A vulnerability was discovered in the OpenJDK JRE related to information disclosure. An attacker could exploit this to expose sensitive data over the network. (CVE-2016-3550)

Update instructions:

The problem can be corrected by updating your system to the following package versions:

Ubuntu 16.04 LTS:
openjdk-8-jdk 8u91-b14-3ubuntu1~16.04.1
openjdk-8-jre 8u91-b14-3ubuntu1~16.04.1
openjdk-8-jre-headless 8u91-b14-3ubuntu1~16.04.1
openjdk-8-jre-jamvm 8u91-b14-3ubuntu1~16.04.1
openjdk-8-jre-zero 8u91-b14-3ubuntu1~16.04.1

After a standard system update you need to restart any Java applications or applets to make all the necessary changes.

References:
http://www.ubuntu.com/usn/usn-3043-1
CVE-2016-3458, CVE-2016-3500, CVE-2016-3508, CVE-2016-3550,
CVE-2016-3587, CVE-2016-3598, CVE-2016-3606, CVE-2016-3610

Package Information:
https://launchpad.net/ubuntu/+source/openjdk-8/8u91-b14-3ubuntu1~16.04.1

Original Source

Url : http://www.ubuntu.com/usn/USN-3043-1

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 4
Application 4
Application 1
Application 3
Os 3

Nessus® Vulnerability Scanner

Date Description
2017-05-10 Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2017-1216.nasl - Type : ACT_GATHER_INFO
2017-05-01 Name : The remote EulerOS host is missing multiple security updates.
File : EulerOS_SA-2016-1032.nasl - Type : ACT_GATHER_INFO
2017-01-20 Name : The remote Gentoo host is missing one or more security-related patches.
File : gentoo_GLSA-201701-43.nasl - Type : ACT_GATHER_INFO
2016-12-21 Name : The remote device is missing a vendor-supplied security patch.
File : f5_bigip_SOL05016441.nasl - Type : ACT_GATHER_INFO
2016-12-20 Name : The remote device is missing a vendor-supplied security patch.
File : f5_bigip_SOL25075696.nasl - Type : ACT_GATHER_INFO
2016-11-18 Name : The version of Java SDK installed on the remote AIX host is affected by multi...
File : aix_java_july2016_advisory.nasl - Type : ACT_GATHER_INFO
2016-11-07 Name : The remote SUSE host is missing one or more security updates.
File : suse_SU-2016-2726-1.nasl - Type : ACT_GATHER_INFO
2016-10-17 Name : The remote Gentoo host is missing one or more security-related patches.
File : gentoo_GLSA-201610-08.nasl - Type : ACT_GATHER_INFO
2016-10-05 Name : The remote openSUSE host is missing a security update.
File : openSUSE-2016-1156.nasl - Type : ACT_GATHER_INFO
2016-09-22 Name : The remote SUSE host is missing one or more security updates.
File : suse_SU-2016-2347-1.nasl - Type : ACT_GATHER_INFO
2016-09-19 Name : The remote SUSE host is missing one or more security updates.
File : suse_SU-2016-2328-1.nasl - Type : ACT_GATHER_INFO
2016-09-16 Name : The remote Amazon Linux AMI host is missing a security update.
File : ala_ALAS-2016-748.nasl - Type : ACT_GATHER_INFO
2016-09-13 Name : The remote Ubuntu host is missing one or more security-related patches.
File : ubuntu_USN-3077-1.nasl - Type : ACT_GATHER_INFO
2016-09-13 Name : The remote SUSE host is missing one or more security updates.
File : suse_SU-2016-2286-1.nasl - Type : ACT_GATHER_INFO
2016-09-08 Name : The remote SUSE host is missing one or more security updates.
File : suse_SU-2016-2261-1.nasl - Type : ACT_GATHER_INFO
2016-09-08 Name : The remote SUSE host is missing one or more security updates.
File : suse_SU-2016-2210-1.nasl - Type : ACT_GATHER_INFO
2016-09-02 Name : The remote SUSE host is missing one or more security updates.
File : suse_SU-2016-2012-1.nasl - Type : ACT_GATHER_INFO
2016-09-02 Name : The remote SUSE host is missing one or more security updates.
File : suse_SU-2016-1997-1.nasl - Type : ACT_GATHER_INFO
2016-08-29 Name : The remote Scientific Linux host is missing one or more security updates.
File : sl_20160826_java_1_6_0_openjdk_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2016-08-29 Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2016-1776.nasl - Type : ACT_GATHER_INFO
2016-08-29 Name : The remote Oracle Linux host is missing one or more security updates.
File : oraclelinux_ELSA-2016-1776.nasl - Type : ACT_GATHER_INFO
2016-08-29 Name : The remote CentOS host is missing one or more security updates.
File : centos_RHSA-2016-1776.nasl - Type : ACT_GATHER_INFO
2016-08-17 Name : The remote Ubuntu host is missing one or more security-related patches.
File : ubuntu_USN-3062-1.nasl - Type : ACT_GATHER_INFO
2016-08-17 Name : The remote openSUSE host is missing a security update.
File : openSUSE-2016-982.nasl - Type : ACT_GATHER_INFO
2016-08-16 Name : The remote openSUSE host is missing a security update.
File : openSUSE-2016-978.nasl - Type : ACT_GATHER_INFO
2016-08-16 Name : The remote openSUSE host is missing a security update.
File : openSUSE-2016-977.nasl - Type : ACT_GATHER_INFO
2016-08-15 Name : The remote Debian host is missing a security-related update.
File : debian_DSA-3641.nasl - Type : ACT_GATHER_INFO
2016-08-12 Name : The remote openSUSE host is missing a security update.
File : openSUSE-2016-976.nasl - Type : ACT_GATHER_INFO
2016-08-11 Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2016-1589.nasl - Type : ACT_GATHER_INFO
2016-08-11 Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2016-1588.nasl - Type : ACT_GATHER_INFO
2016-08-11 Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2016-1587.nasl - Type : ACT_GATHER_INFO
2016-08-08 Name : The remote openSUSE host is missing a security update.
File : openSUSE-2016-944.nasl - Type : ACT_GATHER_INFO
2016-08-08 Name : The remote Debian host is missing a security update.
File : debian_DLA-579.nasl - Type : ACT_GATHER_INFO
2016-08-02 Name : The remote Amazon Linux AMI host is missing a security update.
File : ala_ALAS-2016-729.nasl - Type : ACT_GATHER_INFO
2016-07-28 Name : The remote Oracle Linux host is missing one or more security updates.
File : oraclelinux_ELSA-2016-1504.nasl - Type : ACT_GATHER_INFO
2016-07-28 Name : The remote CentOS host is missing one or more security updates.
File : centos_RHSA-2016-1504.nasl - Type : ACT_GATHER_INFO
2016-07-28 Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2016-1504.nasl - Type : ACT_GATHER_INFO
2016-07-28 Name : The remote Scientific Linux host is missing one or more security updates.
File : sl_20160727_java_1_7_0_openjdk_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2016-07-27 Name : The remote Ubuntu host is missing one or more security-related patches.
File : ubuntu_USN-3043-1.nasl - Type : ACT_GATHER_INFO
2016-07-22 Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2016-1477.nasl - Type : ACT_GATHER_INFO
2016-07-22 Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2016-1476.nasl - Type : ACT_GATHER_INFO
2016-07-22 Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2016-1475.nasl - Type : ACT_GATHER_INFO
2016-07-22 Name : The remote Unix host contains a programming platform that is affected by mult...
File : oracle_java_cpu_jul_2016_unix.nasl - Type : ACT_GATHER_INFO
2016-07-22 Name : The remote Windows host contains a programming platform that is affected by m...
File : oracle_java_cpu_jul_2016.nasl - Type : ACT_GATHER_INFO
2016-07-21 Name : The remote Amazon Linux AMI host is missing a security update.
File : ala_ALAS-2016-723.nasl - Type : ACT_GATHER_INFO
2016-07-21 Name : The remote Scientific Linux host is missing one or more security updates.
File : sl_20160720_java_1_8_0_openjdk_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2016-07-21 Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2016-1458.nasl - Type : ACT_GATHER_INFO
2016-07-21 Name : The remote Oracle Linux host is missing one or more security updates.
File : oraclelinux_ELSA-2016-1458.nasl - Type : ACT_GATHER_INFO
2016-07-21 Name : A programming platform installed on the remote Windows host is affected by mu...
File : oracle_jrockit_cpu_jul_2016.nasl - Type : ACT_GATHER_INFO
2016-07-21 Name : The remote CentOS host is missing one or more security updates.
File : centos_RHSA-2016-1458.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.
0
1
Date Informations
2016-07-28 13:25:49
  • Multiple Updates
2016-07-27 13:23:49
  • First insertion