CVE-2016-0687
Publication date 21 April 2016
Last updated 25 August 2025
Ubuntu priority
Description
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 and Java SE Embedded 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to the Hotspot sub-component.
From the Ubuntu Security Team
A vulnerability was discovered in the OpenJDK JRE related to information disclosure, data integrity, and availability. An attacker could exploit these to cause a denial of service, expose sensitive data over the network, or possibly execute arbitrary code.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| openjdk-6 | 16.04 LTS xenial | Not in release |
| 14.04 LTS trusty |
Fixed 6b39-1.13.11-0ubuntu0.14.04.1
|
|
| openjdk-7 | 16.04 LTS xenial | Not in release |
| 14.04 LTS trusty |
Fixed 7u101-2.6.6-0ubuntu0.14.04.1
|
|
| openjdk-8 | 16.04 LTS xenial |
Fixed 8u91-b14-0ubuntu4~16.04.1
|
| 14.04 LTS trusty | Not in release | |
Severity score breakdown
CVSS version: CVSS v3.0
Base score
9.6 · Critical
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
References
Related Ubuntu Security Notices (USN)
- USN-2972-1
- OpenJDK 6 vulnerabilities
- 10 May 2016
- USN-2964-1
- OpenJDK 7 vulnerabilities
- 5 May 2016
- USN-2963-1
- OpenJDK 8 vulnerabilities
- 5 May 2016