CVE-2016-3498

MEDIUM

Oracle Java SE <7u101,8u92 - DoS

Title source: llm

Description

Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 allows remote attackers to affect availability via vectors related to JavaFX.

References (15)

[Mailing List] http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00011.html

[Mailing List] http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.html

[Mailing List] http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00032.html

[Mailing List] http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00033.html

[Mailing List] http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00034.html

[Mailing List] http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00035.html

[Patch, Vendor Advisory] http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/91787

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1036365

[Vendor Advisory] https://access.redhat.com/errata/RHSA-2016:1475

[Vendor Advisory] https://access.redhat.com/errata/RHSA-2016:1476

[Vendor Advisory] https://security.netapp.com/advisory/ntap-20160721-0001/

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/91956

[Third Party Advisory] https://security.gentoo.org/glsa/201610-08

[Mailing List] http://lists.opensuse.org/opensuse-updates/2016-08/msg00028.html

Scores

CVSS v3 5.3

EPSS 0.0777

EPSS Percentile 91.8%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Classification

Status draft

Affected Products (4)

oracle/jdk

oracle/jdk

oracle/jre

oracle/jre

Timeline

Published Jul 21, 2016

Tracked Since Feb 18, 2026