جزئیات آسیبپذیری
CVE-2016-3427
بهرهبرداری فعالOracle Java SE and JRockit
CVSS 3.1
9.8بحرانی
نمای کلی
اکسپلویتهای عمومی
اخبار مرتبط
خط زمانی
خلاصهی فارسی
خلاصهی فارسی برای این آسیبپذیری هنوز تهیه نشده است.
شرح رسمی (انگلیسی)
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 9.8بحرانی | 3.1 | CISA ADP / Vulnrichment (CISA-ADP) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
محصولات آسیبپذیر
| فروشنده | محصول | نسخهها | منبع |
|---|---|---|---|
| اطلاعات محصول ثبت نشده است. | |||
منابع و راهنماها
۶۰- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00006.html vendor-advisoryx_refsource_SUSE
- http://rhn.redhat.com/errata/RHSA-2016-0677.html vendor-advisoryx_refsource_REDHAT
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00039.html vendor-advisoryx_refsource_SUSE
- http://rhn.redhat.com/errata/RHSA-2016-1039.html vendor-advisoryx_refsource_REDHAT
- http://rhn.redhat.com/errata/RHSA-2016-0701.html vendor-advisoryx_refsource_REDHAT
- http://www.ubuntu.com/usn/USN-2972-1 vendor-advisoryx_refsource_UBUNTU
- http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html x_refsource_CONFIRM
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00042.html vendor-advisoryx_refsource_SUSE
- http://www.securitytracker.com/id/1037331 vdb-entryx_refsource_SECTRACK
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00002.html vendor-advisoryx_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00012.html vendor-advisoryx_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00026.html vendor-advisoryx_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00040.html vendor-advisoryx_refsource_SUSE
- http://rhn.redhat.com/errata/RHSA-2016-0676.html vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2016:1430 vendor-advisoryx_refsource_REDHAT
- https://security.netapp.com/advisory/ntap-20160420-0001/ x_refsource_CONFIRM
- http://rhn.redhat.com/errata/RHSA-2016-0708.html vendor-advisoryx_refsource_REDHAT
- http://rhn.redhat.com/errata/RHSA-2016-0723.html vendor-advisoryx_refsource_REDHAT
- http://rhn.redhat.com/errata/RHSA-2016-0651.html vendor-advisoryx_refsource_REDHAT
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00058.html vendor-advisoryx_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00021.html vendor-advisoryx_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00059.html vendor-advisoryx_refsource_SUSE
- https://kc.mcafee.com/corporate/index?page=content&id=SB10159 x_refsource_CONFIRM
- http://www.ubuntu.com/usn/USN-2964-1 vendor-advisoryx_refsource_UBUNTU
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00009.html vendor-advisoryx_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00067.html vendor-advisoryx_refsource_SUSE
- https://security.gentoo.org/glsa/201606-18 vendor-advisoryx_refsource_GENTOO
- http://rhn.redhat.com/errata/RHSA-2016-0716.html vendor-advisoryx_refsource_REDHAT
- http://www.securitytracker.com/id/1035596 vdb-entryx_refsource_SECTRACK
- http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html x_refsource_CONFIRM
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00027.html vendor-advisoryx_refsource_SUSE
- http://www.ubuntu.com/usn/USN-2963-1 vendor-advisoryx_refsource_UBUNTU
- http://rhn.redhat.com/errata/RHSA-2016-0675.html vendor-advisoryx_refsource_REDHAT
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00022.html vendor-advisoryx_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00061.html vendor-advisoryx_refsource_SUSE
- http://rhn.redhat.com/errata/RHSA-2016-0702.html vendor-advisoryx_refsource_REDHAT
- http://rhn.redhat.com/errata/RHSA-2016-0679.html vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2017:1216 vendor-advisoryx_refsource_REDHAT
- http://www.debian.org/security/2016/dsa-3558 vendor-advisoryx_refsource_DEBIAN
- http://rhn.redhat.com/errata/RHSA-2016-0678.html vendor-advisoryx_refsource_REDHAT
- http://www.securityfocus.com/bid/86421 vdb-entryx_refsource_BID
- http://rhn.redhat.com/errata/RHSA-2016-0650.html vendor-advisoryx_refsource_REDHAT
- https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/rc3abf40b06c511d5693baf707d6444bf7745e6a1e343e6f530a12258%40%3Cuser.cassandra.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/r5f48b16573a11fdf0b557cc3d1d71423ecde8ee771c29f32334fa948%40%3Cdev.cassandra.apache.org%3E mailing-listx_refsource_MLIST
- http://www.openwall.com/lists/oss-security/2020/08/31/1 mailing-listx_refsource_MLIST
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-3427 government-resource
اطلاعات
- تاریخ انتشار
- ۱۳۹۵/۰۲/۰۲
- آخرین بهروزرسانی
- ۱۴۰۴/۰۷/۳۰
- وضعیت
- PUBLISHED
- صادرکننده (CNA)
- oracle
- اولویت کلون
- بهزودی
فهرست KEV آژانس CISA
- تاریخ افزودهشدن
- ۱۴۰۲/۰۲/۲۲
- مهلت رفع
- ۱۴۰۲/۰۳/۱۲
- استفاده در باجافزار
- نامشخص
پیشبینی بهرهبرداری (EPSS)
۹۲٫۳۳٪
احتمال بهرهبرداری در ۳۰ روز
۹۹٫۸٪
صدک (نسبت به همهی CVEها)
ارزیابی SSVC (CISA)
- Automatable
- yes
- Exploitation
- active
- Technical Impact
- total
ضعفها (CWE)
- CWE-284Improper Access Control