PT-2016-5447 · Oracle+3 · Java Se+5

Published 2016-04-21 · Updated 2022-05-13 · CVE-2016-3422

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u113 through 8u77

Description The issue allows remote attackers to affect availability via vectors related to 2D. A vulnerability in Java SDK could also allow a remote attacker to execute arbitrary code on the system by escalating privileges through modification or removal of the security manager.

Recommendations For Oracle Java SE versions 6u113 through 8u77, update to a version that contains a fix for this issue to prevent remote attackers from affecting availability and executing arbitrary code. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2016-3422

RHSA-2016:0677

RHSA-2016:0678

RHSA-2016:0679

RHSA-2016:0701

RHSA-2016:0702

RHSA-2016:0708

RHSA-2016:0716

RHSA-2016:1039

RHSA-2016:1430

RHSA-2016_0677

RHSA-2016_0678

RHSA-2016_0679

RHSA-2016_0701

RHSA-2016_0708

RHSA-2016_0716

RHSA-2016_1039

RHSA-2017:1216

SUSE-SU-2016:1299-1

SUSE-SU-2016:1300-1

SUSE-SU-2016:1303-1

SUSE-SU-2016:1378-1

SUSE-SU-2016:1379-1

SUSE-SU-2016:1458-1

SUSE-SU-2016:1475-1

Affected Products

Ibm Aix

Java Platform

Java Sdk

Java Se

Red Hat

Suse

References · 55

• https://osv.dev/vulnerability/CVE-2016-3422 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00067.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:1379-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:1300-1 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2016-0701.html · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2016:1430 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2016-0677.html · Vendor Advisory
• http://oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2016-1039.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2016-0702.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:1378-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00002.html · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2017:1216 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00039.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-3422 · Security Note