CVE-2016-0686

Public on 2016-04-21

Modified on 2016-05-11

Description

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 and Java SE Embedded 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Serialization.

Severity

Critical

See what this means

CVSS v3 Base Score

6.8

See breakdown

Affected Packages

Platform	Package	Release Date	Advisory
Amazon Linux 1	java-1.6.0-openjdk	2016-05-11 11:00	ALAS-2016-700
Amazon Linux 1	java-1.7.0-openjdk	2016-04-27 16:15	ALAS-2016-693
Amazon Linux 1	java-1.8.0-openjdk	2016-04-21 16:00	ALAS-2016-688

CVSS Scores

	Score Type	Score	Vector
Amazon Linux	CVSSv2	6.8	AV:N/AC:M/Au:N/C:P/I:P/A:P
NVD	CVSSv2	10.0	AV:N/AC:L/Au:N/C:C/I:C/A:C
NVD	CVSSv3	9.6	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

References

Red Hat: CVE-2016-0686 Mitre: CVE-2016-0686 FAQs regarding Amazon Linux ALAS/CVE Severity