CVE-2016-3426

Publication date 21 April 2016

Last updated 25 August 2025

Ubuntu priority

Low

Why this priority?

Cvss 3 Severity Score

3.1 · Low

Score breakdown

Description

Unspecified vulnerability in Oracle Java SE 8u77 and Java SE Embedded 8u77 allows remote attackers to affect confidentiality via vectors related to JCE.

From the Ubuntu Security Team

A vulnerability was discovered in the OpenJDK JRE related to information disclosure. An attacker could exploit this to expose sensitive data over the network.

Read the notes from the security team

Status

Package Ubuntu Release Status
openjdk-6 16.04 LTS xenial Not in release
15.10 wily
Not affected
14.04 LTS trusty Not in release
12.04 LTS precise
Not affected
openjdk-7 16.04 LTS xenial Not in release
15.10 wily
Not affected
14.04 LTS trusty Not in release
12.04 LTS precise
Not affected
openjdk-8 16.04 LTS xenial
Fixed 8u91-b14-0ubuntu4~16.04.1
15.10 wily
Fixed 8u91-b14-0ubuntu4~15.10.1
14.04 LTS trusty Not in release
12.04 LTS precise Not in release

Notes

sbeattie

openjdk-8 only

Severity score breakdown

Parameter Value
Base score 3.1 · Low
Attack vector Network
Attack complexity High
Privileges required None
User interaction Required
Scope Unchanged
Confidentiality Low
Integrity impact None
Availability impact None
Vector CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

References

Related Ubuntu Security Notices (USN)

Other references