PT-2016-5506 · Oracle+2 · Jrockit+5

Published 2016-07-21 · Updated 2024-06-15 · CVE-2016-3485

Positive Technologies (AI Summary)

CVSS v3.1

2.9

Low

Base vector

AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u115, 7u101, and 8u92 Java SE Embedded version 8u91 JRockit version R28.3.10

Description The issue affects the Networking component and allows local users to impact integrity. It has no confidentiality impact, low integrity impact, and no availability impact.

Recommendations For Oracle Java SE versions 6u115, 7u101, and 8u92, update to a version that addresses the issue related to the Networking component. For Java SE Embedded version 8u91, update to a version that addresses the issue related to the Networking component. For JRockit version R28.3.10, update to a version that addresses the issue related to the Networking component. As a temporary workaround, consider restricting access to the Networking component until a patch is available.

Fix

Related Identifiers

CVE-2016-3485

OPENSUSE-SU-2016_2050-1

OPENSUSE-SU-2016_2051-1

OPENSUSE-SU-2016_2052-1

OPENSUSE-SU-2016_2058-1

OPENSUSE-SU-2024:10197-1

OPENSUSE-SU-2024:10534-1

SUSE-SU-2016:1997-1

SUSE-SU-2016:2012-1

SUSE-SU-2016:2261-1

SUSE-SU-2016:2286-1

SUSE-SU-2016:2347-1

SUSE-SU-2016:2348-1

SUSE-SU-2016:2430-1

SUSE-SU-2016:2726-1

SUSE-SU-2016_2261-1

SUSE-SU-2016_2286-1

SUSE-SU-2016_2347-1

SUSE-SU-2016_2348-1

SUSE-SU-2016_2430-1

SUSE-SU-2016_2726-1

Affected Products

Ibm Aix

Jrockit

Java Platform

Java Se

Java Se Embedded

Suse

References · 378

• https://osv.dev/vulnerability/SUSE-SU-2016:2726-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-3485 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00032.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:2348-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00034.html · Vendor Advisory
• https://security.gentoo.org/glsa/201610-08 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:2347-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10197-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:2430-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:2261-1 · Vendor Advisory
• http://oracle.com/technetwork/security-advisory/cpujul2016-2881720.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00005.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:2286-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00033.html · Vendor Advisory
• https://security.gentoo.org/glsa/201701-43 · Vendor Advisory