PT-2016-5450 · Oracle+4 · Jrockit+7

Published 2016-04-20 · Updated 2024-06-15 · CVE-2016-3425

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u113, 7u99, and 8u77 Oracle Java SE Embedded version 8u77 JRockit version R28.3.9

Description The issue allows remote attackers to affect availability via vectors related to JAXP.

Recommendations For Oracle Java SE versions 6u113, 7u99, and 8u77, update to a version that fixes this issue. For Oracle Java SE Embedded version 8u77, update to a version that fixes this issue. For JRockit version R28.3.9, update to a version that fixes this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CESA-2016_0650

CESA-2016_0651

CESA-2016_0675

CESA-2016_0676

CESA-2016_0723

CVE-2016-3425

DLA-451-1

DSA-3558-1

MGASA-2016-0149

OPENSUSE-SU-2016_1222-1

OPENSUSE-SU-2016_1230-1

OPENSUSE-SU-2016_1235-1

OPENSUSE-SU-2016_1262-1

OPENSUSE-SU-2016_1265-1

OPENSUSE-SU-2024:10197-1

OPENSUSE-SU-2024:10534-1

RHSA-2016:0650

RHSA-2016:0651

RHSA-2016:0675

RHSA-2016:0676

RHSA-2016:0677

RHSA-2016:0678

RHSA-2016:0679

RHSA-2016:0723

RHSA-2016_0650

RHSA-2016_0651

RHSA-2016_0675

RHSA-2016_0676

RHSA-2016_0677

RHSA-2016_0678

RHSA-2016_0679

RHSA-2016_0723

SUSE-SU-2016:1248-1

SUSE-SU-2016:1250-1

USN-2963-1

USN-2964-1

USN-2972-1

Affected Products

Centos

Jrockit

Java Platform

Oracle Java Se

Oracle Java Se Embedded

Red Hat

Suse

Ubuntu

References · 377

• http://ubuntu.com/usn/USN-2964-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-2964-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2016-0149 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:1250-1 · Vendor Advisory
• http://oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10197-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-3425 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2016-0676.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2016-0650.html · Vendor Advisory
• https://osv.dev/vulnerability/USN-2963-1 · Vendor Advisory
• http://ubuntu.com/usn/USN-2972-1 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2016-0723.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00012.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-3425 · Security Note
• https://ubuntu.com/security/CVE-2016-0687 · Vendor Advisory