Skip to content
OpenAdvisories
Unscored USN-2884-1 6 CVEs

openjdk-7 vulnerabilities

Published Feb 1, 2016 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

Multiple vulnerabilities were discovered in the OpenJDK JRE related
to information disclosure, data integrity, and availability. An
attacker could exploit these to cause a denial of service, expose
sensitive data over the network, or possibly execute arbitrary code.
(CVE-2016-0483, CVE-2016-0494)

A vulnerability was discovered in the OpenJDK JRE related to data
integrity. An attacker could exploit this to expose sensitive data
over the network or possibly execute arbitrary code. (CVE-2016-0402)

It was discovered that OpenJDK 7 incorrectly allowed MD5 to be used
for TLS connections. If a remote attacker were able to perform a
machine-in-the-middle attack, this flaw could be exploited to expose
sensitive information. (CVE-2015-7575)

A vulnerability was discovered in the OpenJDK JRE related to
information disclosure. An attacker could exploit this to expose
sensitive data over the network. (CVE-2016-0448)

A vulnerability was discovered in the OpenJDK JRE related to
availability. An attacker could exploit this to cause a denial of
service. (CVE-2016-0466)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS openjdk-7 7u95-2.6.4-0ubuntu0.14.04.1

Vulnerabilities 6

References

  • report
    https://ubuntu.com/security/CVE-2015-7575
  • report
    https://ubuntu.com/security/CVE-2016-0402
  • report
    https://ubuntu.com/security/CVE-2016-0448
  • report
    https://ubuntu.com/security/CVE-2016-0466
  • report
    https://ubuntu.com/security/CVE-2016-0483
  • report
    https://ubuntu.com/security/CVE-2016-0494