PT-2016-1068 · Oracle+5 · Java Se Embedded+7

Published 2016-01-19 · Updated 2024-06-15 · CVE-2016-0402

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Java SE versions 6u105, 7u91, and 8u66 Java SE Embedded version 8u65

Description The issue is related to errors in the code of the Networking component in the Java Platform, which can be exploited by a remote attacker to affect data integrity. This can be achieved through unknown vectors related to Networking, potentially allowing the attacker to modify, add, or delete data using network packets.

Recommendations For Java SE versions 6u105, 7u91, and 8u66, update to a version that includes the fix for this issue. For Java SE Embedded version 8u65, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the Networking component until a patch is available.

Fix

Weakness Enumeration

CWE-17

Related Identifiers

BDU:2016-00138

CESA-2016_0049

CESA-2016_0050

CESA-2016_0053

CESA-2016_0054

CESA-2016_0067

CVE-2016-0402

DLA-410-1

DSA-3458-1

DSA-3465-1

MGASA-2016-0048

OPENSUSE-SU-2016_0263-1

OPENSUSE-SU-2016_0268-1

OPENSUSE-SU-2016_0270-1

OPENSUSE-SU-2016_0272-1

OPENSUSE-SU-2016_0279-1

OPENSUSE-SU-2024:10197-1

OPENSUSE-SU-2024:10534-1

RHSA-2016:0049

RHSA-2016:0050

RHSA-2016:0053

RHSA-2016:0054

RHSA-2016:0055

RHSA-2016:0056

RHSA-2016:0057

RHSA-2016:0067

RHSA-2016:0098

RHSA-2016:0099

RHSA-2016:0100

RHSA-2016:0101

RHSA-2016:1430

RHSA-2016_0049

RHSA-2016_0050

RHSA-2016_0053

RHSA-2016_0054

RHSA-2016_0055

RHSA-2016_0056

RHSA-2016_0057

RHSA-2016_0067

RHSA-2016_0098

RHSA-2016_0099

RHSA-2016_0101

SUSE-SU-2016:0256-1

SUSE-SU-2016:0265-1

SUSE-SU-2016:0269-1

SUSE-SU-2016:0390-1

SUSE-SU-2016:0399-1

SUSE-SU-2016:0401-1

SUSE-SU-2016:0428-1

SUSE-SU-2016:0431-1

SUSE-SU-2016:0433-1

SUSE-SU-2016:0636-1

SUSE-SU-2016:0770-1

USN-2884-1

USN-2885-1

Affected Products

Centos

Ibm Aix

Java Platform

Java Se

Java Se Embedded

Red Hat

Suse

Ubuntu

References · 405

• https://ubuntu.com/security/CVE-2015-7575 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-0402 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-0402 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-3465-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00047.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2016-0067.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:0636-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:0428-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-0494 · Vendor Advisory
• https://security.gentoo.org/glsa/201610-08 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2016:1430 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:0431-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-00138 · Security Note
• https://osv.dev/vulnerability/MGASA-2016-0048 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2016-0050.html · Vendor Advisory