CVE-2016-0695: Medium severity oracle java se 7 vulnerability
It was discovered that the Security component of OpenJDK failed to properly check DSA (Digital Signature Algorithm) parameters. The use of keys with incorrect parameters could lead to disclosure of sensitive data.
Other sources
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality via vectors related to Security.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-0695?
CVE-2016-0695 is assessed as a high severity vulnerability due to potential disclosure of sensitive data.
How do I fix CVE-2016-0695?
To fix CVE-2016-0695, update your Java SE to the latest version provided by Oracle that includes the security patch.
What systems are affected by CVE-2016-0695?
CVE-2016-0695 affects Oracle JDK versions 1.6.0_update113, 1.7.0_update99, and 1.8.0_update77, as well as certain Oracle JRE versions.
What kind of attack can be executed through CVE-2016-0695?
An attacker could potentially exploit CVE-2016-0695 to use keys with incorrect DSA parameters, leading to unauthorized access to sensitive data.
Is there a workaround for CVE-2016-0695?
Currently, the only recommended solution for CVE-2016-0695 is to apply the updates from Oracle, as there are no effective workarounds.