First published: Fri Jan 15 2016(Updated: )
Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect integrity via unknown vectors related to Networking.
Credit: secalert_us@oracle.com
Affected Software | Affected Version | How to fix |
---|---|---|
Ubuntu | =12.04 | |
Ubuntu | =14.04 | |
Ubuntu | =15.04 | |
Ubuntu | =15.10 | |
Oracle Java SE 7 | =1.6.0-update105 | |
Oracle Java SE 7 | =1.7.0-update91 | |
Oracle Java SE 7 | =1.8.0-update66 | |
Oracle JRE | =1.6.0-update105 | |
Oracle JRE | =1.7.0-update91 | |
Oracle JRE | =1.8.0-update66 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-0402 is considered to have a medium severity rating since it affects the integrity of the system.
To address CVE-2016-0402, update your Oracle Java SE or Java SE Embedded installations to the latest version available.
CVE-2016-0402 affects Oracle Java SE versions 6u105, 7u91, and 8u66, as well as various Ubuntu Linux versions.
Yes, CVE-2016-0402 can potentially be exploited by remote attackers due to its network-related vulnerabilities.
While the best approach is to update the affected software, limiting network access may serve as a temporary workaround for CVE-2016-0402.