PT-2016-1517 · Oracle+4 · Java Se+5

Published 2016-03-23 · Updated 2024-06-15 · CVE-2016-0636

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 7u97, 8u73, and 8u74

Description The issue is related to an unspecified vulnerability in the Hotspot sub-component, allowing remote attackers to affect confidentiality, integrity, and availability. It is also described as a vulnerability in the Java Platform related to code errors, which can be exploited by a remote attacker to execute arbitrary code using a specially crafted web page.

Recommendations For Oracle Java SE version 7u97, update to a version that contains a fix for this issue. For Oracle Java SE version 8u73, update to a version that contains a fix for this issue. For Oracle Java SE version 8u74, update to a version that contains a fix for this issue.

Fix

Weakness Enumeration

CWE-17

Related Identifiers

BDU:2016-00818

CESA-2016_0511

CESA-2016_0512

CESA-2016_0513

CESA-2016_0514

CVE-2016-0636

DLA-451-1

DSA-3558-1

MGASA-2016-0130

OPENSUSE-SU-2016_0971-1

OPENSUSE-SU-2016_0983-1

OPENSUSE-SU-2016_1004-1

OPENSUSE-SU-2016_1005-1

OPENSUSE-SU-2016_1042-1

OPENSUSE-SU-2024:10197-1

OPENSUSE-SU-2024:10534-1

RHSA-2016:0511

RHSA-2016:0512

RHSA-2016:0513

RHSA-2016:0514

RHSA-2016:0515

RHSA-2016:0516

RHSA-2016_0511

RHSA-2016_0512

RHSA-2016_0513

RHSA-2016_0514

RHSA-2016_0515

RHSA-2016_0516

SUSE-SU-2016:0956-1

SUSE-SU-2016:0957-1

SUSE-SU-2016:0959-1

SUSE-SU-2016_0956-1

SUSE-SU-2016_0957-1

SUSE-SU-2016_0959-1

USN-2942-1

Affected Products

Centos

Java Platform

Java Se

Red Hat

Suse

Ubuntu

References · 371

• https://osv.dev/vulnerability/USN-2942-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-00818 · Security Note
• https://security.gentoo.org/glsa/201610-08 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2016-0130 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10197-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00003.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00014.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:0956-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00013.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2016-0513.html · Vendor Advisory
• https://advisories.mageia.org/MGASA-2016-0130.html · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00004.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:0957-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00035.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2016-0515.html · Vendor Advisory