OpenJDK: insufficient thread consistency checks in ObjectInputStream (Serialization, 8129952)
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
Configuration 1 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Oracle Java for Red Hat Enterprise Linux 5 | |||
| java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11 | cpe:/a:redhat:rhel_extras_oracle_java:5 | RHSA-2016:0678 | 2016-04-21T00:00:00Z |
| java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11 | cpe:/a:redhat:rhel_extras_oracle_java:5 | RHSA-2016:0679 | 2016-04-21T00:00:00Z |
| Oracle Java for Red Hat Enterprise Linux 6 | |||
| java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7 | cpe:/a:redhat:rhel_extras_oracle_java:6 | RHSA-2016:0677 | 2016-04-21T00:00:00Z |
| java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7 | cpe:/a:redhat:rhel_extras_oracle_java:6 | RHSA-2016:0678 | 2016-04-21T00:00:00Z |
| java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7 | cpe:/a:redhat:rhel_extras_oracle_java:6 | RHSA-2016:0679 | 2016-04-21T00:00:00Z |
| Oracle Java for Red Hat Enterprise Linux 7 | |||
| java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7 | cpe:/a:redhat:rhel_extras_oracle_java:7 | RHSA-2016:0677 | 2016-04-21T00:00:00Z |
| java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7 | cpe:/a:redhat:rhel_extras_oracle_java:7 | RHSA-2016:0678 | 2016-04-21T00:00:00Z |
| java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7 | cpe:/a:redhat:rhel_extras_oracle_java:7 | RHSA-2016:0679 | 2016-04-21T00:00:00Z |
| Red Hat Enterprise Linux 5 | |||
| java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el5_11 | cpe:/o:redhat:enterprise_linux:5 | RHSA-2016:0676 | 2016-04-21T00:00:00Z |
| java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el5_11 | cpe:/o:redhat:enterprise_linux:5 | RHSA-2016:0723 | 2016-05-09T00:00:00Z |
| Red Hat Enterprise Linux 5 Supplementary | |||
| java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5 | cpe:/a:redhat:rhel_extras:5 | RHSA-2016:0702 | 2016-04-29T00:00:00Z |
| java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el5 | cpe:/a:redhat:rhel_extras:5 | RHSA-2016:0708 | 2016-05-02T00:00:00Z |
| Red Hat Enterprise Linux 6 | |||
| java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7 | cpe:/o:redhat:enterprise_linux:6 | RHSA-2016:0651 | 2016-04-20T00:00:00Z |
| java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el6_7 | cpe:/o:redhat:enterprise_linux:6 | RHSA-2016:0675 | 2016-04-21T00:00:00Z |
| java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el6_7 | cpe:/o:redhat:enterprise_linux:6 | RHSA-2016:0723 | 2016-05-09T00:00:00Z |
| Red Hat Enterprise Linux 6 Supplementary | |||
| java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7 | cpe:/a:redhat:rhel_extras:6 | RHSA-2016:0701 | 2016-04-29T00:00:00Z |
| java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7 | cpe:/a:redhat:rhel_extras:6 | RHSA-2016:0708 | 2016-05-02T00:00:00Z |
| java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6 | cpe:/a:redhat:rhel_extras:6 | RHSA-2016:1039 | 2016-05-11T00:00:00Z |
| Red Hat Enterprise Linux 7 | |||
| java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2016:0650 | 2016-04-20T00:00:00Z |
| java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el7_2 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2016:0676 | 2016-04-21T00:00:00Z |
| java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el7_2 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2016:0723 | 2016-05-09T00:00:00Z |
| Red Hat Enterprise Linux 7 Supplementary | |||
| java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7 | cpe:/a:redhat:rhel_extras:7 | RHSA-2016:0701 | 2016-04-29T00:00:00Z |
| java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7 | cpe:/a:redhat:rhel_extras:7 | RHSA-2016:0716 | 2016-05-03T00:00:00Z |
| Red Hat Satellite 5.6 | |||
| java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5 | cpe:/a:redhat:network_satellite:5.6::el5 | RHSA-2016:1430 | 2016-07-18T00:00:00Z |
| java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7 | cpe:/a:redhat:network_satellite:5.6::el5 | RHSA-2016:1430 | 2016-07-18T00:00:00Z |
| spacewalk-java-0:2.0.2-109.el6sat | cpe:/a:redhat:network_satellite:5.6::el5 | RHSA-2016:1430 | 2016-07-18T00:00:00Z |
| java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8 | cpe:/a:redhat:network_satellite:5.6::el6 | RHSA-2017:1216 | 2017-05-09T00:00:00Z |
| Red Hat Satellite 5.7 | |||
| java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7 | cpe:/a:redhat:network_satellite:5.7::el6 | RHSA-2016:1430 | 2016-07-18T00:00:00Z |
| spacewalk-java-0:2.3.8-146.el6sat | cpe:/a:redhat:network_satellite:5.7::el6 | RHSA-2016:1430 | 2016-07-18T00:00:00Z |
| java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8 | cpe:/a:redhat:network_satellite:5.7::el6 | RHSA-2017:1216 | 2017-05-09T00:00:00Z |
No data available yet.
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-451-1 | openjdk-7 security update |
Debian DSA |
DSA-3558-1 | openjdk-7 security update |
EUVD |
EUVD-2016-0721 | Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 and Java SE Embedded 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Serialization. |
Ubuntu USN |
USN-2963-1 | OpenJDK 8 vulnerabilities |
Ubuntu USN |
USN-2964-1 | OpenJDK 7 vulnerabilities |
Ubuntu USN |
USN-2972-1 | OpenJDK 6 vulnerabilities |
No CVSS v4.0
No CVSS v3.1
This CVE is not in the KEV list.
Exploit prediction score: 4.7% (4.720% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|