PT-2016-5523 · Oracle+2 · Java Se+3

Published 2016-07-21 · Updated 2024-06-15 · CVE-2016-3503

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u115, 7u101, and 8u92

Description The issue affects confidentiality, integrity, and availability. It is related to vectors concerning the Install component, allowing local users to exploit it.

Recommendations For Oracle Java SE version 6u115, update to a version that fixes this issue. For Oracle Java SE version 7u101, update to a version that fixes this issue. For Oracle Java SE version 8u92, update to a version that fixes this issue.

Fix

Related Identifiers

CVE-2016-3503

OPENSUSE-SU-2016_2050-1

OPENSUSE-SU-2016_2051-1

OPENSUSE-SU-2016_2052-1

OPENSUSE-SU-2016_2058-1

OPENSUSE-SU-2024:10197-1

OPENSUSE-SU-2024:10534-1

RHSA-2016:1475

RHSA-2016:1476

RHSA-2016:1477

RHSA-2016_1475

RHSA-2016_1476

RHSA-2016_1477

SUSE-SU-2016:1997-1

SUSE-SU-2016:2012-1

Affected Products

Java Platform

Java Se

Red Hat

Suse

References · 365

• http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00032.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00034.html · Vendor Advisory
• https://security.gentoo.org/glsa/201610-08 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10197-1 · Vendor Advisory
• http://oracle.com/technetwork/security-advisory/cpujul2016-2881720.html · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2016:1477 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-3503 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00033.html · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2016:1475 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-3503 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00011.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2016-08/msg00028.html · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2016:1476 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:1997-1 · Vendor Advisory