Vulnerability Details : CVE-2016-5547
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS v3.0 Base Score 5.3 (Availability impacts).
Vulnerability category: Denial of service
Products affected by CVE-2016-5547
- cpe:2.3:a:oracle:jrockit:r28.3.12:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:jdk:1.8:update_112:*:*:*:*:*:*
- cpe:2.3:a:oracle:jdk:1.8:update_111:*:*:*:*:*:*
- cpe:2.3:a:oracle:jdk:1.7:update_121:*:*:*:*:*:*
- cpe:2.3:a:oracle:jre:1.8:update_111:*:*:*:*:*:*
- cpe:2.3:a:oracle:jre:1.7:update_121:*:*:*:*:*:*
- cpe:2.3:a:oracle:jre:1.8:update_112:*:*:*:*:*:*
Threat overview for CVE-2016-5547
Top countries where our scanners detected CVE-2016-5547
Top open port discovered on systems with this issue
80
IPs affected by CVE-2016-5547 272
Threat actors abusing to this issue?
Yes
Find out if you* are
affected by CVE-2016-5547!
*Directly or indirectly through your vendors, service providers and 3rd parties.
Powered by
attack surface intelligence
from SecurityScorecard.
Exploit prediction scoring system (EPSS) score for CVE-2016-5547
0.37%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 56 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2016-5547
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:N/I:N/A:P |
10.0
|
2.9
|
NIST | |
|
5.3
|
MEDIUM | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L |
3.9
|
1.4
|
NIST |
References for CVE-2016-5547
-
http://rhn.redhat.com/errata/RHSA-2017-0176.html
RHSA-2017:0176 - Security Advisory - Red Hat Customer Portal
-
http://www.securitytracker.com/id/1037637
Oracle Java SE Bugs Let Remote Usrs Access and Modify Data, Deny Service, and Gain Elevated Privileges - SecurityTracker
-
http://rhn.redhat.com/errata/RHSA-2017-0336.html
RHSA-2017:0336 - Security Advisory - Red Hat Customer Portal
-
https://security.gentoo.org/glsa/201701-65
Oracle JRE/JDK: Multiple vulnerabilities (GLSA 201701-65) — Gentoo security
-
https://security.gentoo.org/glsa/201707-01
IcedTea: Multiple vulnerabilities (GLSA 201707-01) — Gentoo security
-
http://rhn.redhat.com/errata/RHSA-2017-0263.html
RHSA-2017:0263 - Security Advisory - Red Hat Customer Portal
-
http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html
Oracle Critical Patch Update - January 2017Patch;Vendor Advisory
-
https://access.redhat.com/errata/RHSA-2017:1216
RHSA-2017:1216 - Security Advisory - Red Hat Customer Portal
-
http://rhn.redhat.com/errata/RHSA-2017-0175.html
RHSA-2017:0175 - Security Advisory - Red Hat Customer Portal
-
http://www.securityfocus.com/bid/95521
Oracle Java SE and JRockit CVE-2016-5547 Remote Security VulnerabilityThird Party Advisory;VDB Entry
-
http://rhn.redhat.com/errata/RHSA-2017-0180.html
RHSA-2017:0180 - Security Advisory - Red Hat Customer Portal
-
http://rhn.redhat.com/errata/RHSA-2017-0269.html
RHSA-2017:0269 - Security Advisory - Red Hat Customer Portal
-
http://www.debian.org/security/2017/dsa-3782
Debian -- Security Information -- DSA-3782-1 openjdk-7
-
http://rhn.redhat.com/errata/RHSA-2017-0337.html
RHSA-2017:0337 - Security Advisory - Red Hat Customer Portal
-
https://security.netapp.com/advisory/ntap-20170119-0001/
January 2017 Java Platform Standard Edition Vulnerabilities in Multiple NetApp Products | NetApp Product Security
Jump to