CVE-2016-3500

MEDIUM

Oracle Java SE <8 - DoS

Title source: llm

Description

Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2016-3508.

References (25)

[Vendor Advisory] http://rhn.redhat.com/errata/RHSA-2016-1504.html

[Vendor Advisory] http://rhn.redhat.com/errata/RHSA-2016-1776.html

[Patch, Vendor Advisory] http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

[Vendor Advisory] http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/91787

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1036365

[Vendor Advisory] http://www.ubuntu.com/usn/USN-3043-1

[Vendor Advisory] http://www.ubuntu.com/usn/USN-3062-1

[Vendor Advisory] http://www.ubuntu.com/usn/USN-3077-1

[Vendor Advisory] https://access.redhat.com/errata/RHSA-2016:1458

[Vendor Advisory] https://access.redhat.com/errata/RHSA-2016:1475

[Vendor Advisory] https://kc.mcafee.com/corporate/index?page=content&id=SB10166

[Vendor Advisory] https://security.netapp.com/advisory/ntap-20160721-0001/

[Third Party Advisory] http://www.debian.org/security/2016/dsa-3641

[Third Party Advisory] https://security.gentoo.org/glsa/201610-08

[Third Party Advisory] https://security.gentoo.org/glsa/201701-43

[Vendor Advisory] https://access.redhat.com/errata/RHSA-2016:1476

[Vendor Advisory] https://access.redhat.com/errata/RHSA-2016:1477

[Mailing List] http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00011.html

[Mailing List] http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.html

... and 5 more

Scores

CVSS v3 5.3

EPSS 0.1161

EPSS Percentile 93.5%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Classification

Status draft

Affected Products (12)

oracle/linux

oracle/jdk

oracle/jre

oracle/jrockit

Timeline

Published Jul 21, 2016

Tracked Since Feb 18, 2026