PT-2016-6549 · Oracle+5 · Oracle Java Se+7

Published 2016-10-19 · Updated 2024-06-15 · CVE-2016-5573

Positive Technologies (AI Summary)

CVSS v3.1

8.3

High

Base vector

AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u121, 7u111, 8u102 Oracle Java SE Embedded version 8u101

Description The issue affects confidentiality, integrity, and availability. It is related to the Hotspot component in Oracle Java SE and to the Libraries component in Oracle Java SE and Java SE Embedded. The vulnerability allows remote attackers to exploit the issue via related vectors.

Recommendations For Oracle Java SE versions 6u121, 7u111, 8u102, update to a version that addresses this issue. For Oracle Java SE Embedded version 8u101, update to a version that addresses this issue. As a temporary workaround, consider restricting access to the Hotspot component until a patch is available. Avoid using the Libraries component in Oracle Java SE and Java SE Embedded until the issue is resolved.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CESA-2016_2079

CESA-2016_2658

CESA-2017_0061

CVE-2016-5573

DLA-704-1

DSA-3707-1

MGASA-2016-0359

OPENSUSE-SU-2016_2862-1

OPENSUSE-SU-2016_2985-1

OPENSUSE-SU-2024:10197-1

OPENSUSE-SU-2024:10534-1

RHSA-2016:2079

RHSA-2016:2088

RHSA-2016:2089

RHSA-2016:2090

RHSA-2016:2136

RHSA-2016:2137

RHSA-2016:2138

RHSA-2016:2658

RHSA-2016:2659

RHSA-2016_2079

RHSA-2016_2088

RHSA-2016_2089

RHSA-2016_2090

RHSA-2016_2136

RHSA-2016_2137

RHSA-2016_2658

RHSA-2016_2659

RHSA-2017:0061

RHSA-2017:1216

RHSA-2017_0061

SUSE-SU-2016:2887-1

SUSE-SU-2016:2953-1

SUSE-SU-2016:3010-1

SUSE-SU-2016:3040-1

SUSE-SU-2016:3041-1

SUSE-SU-2016:3043-1

SUSE-SU-2016:3068-1

SUSE-SU-2016:3078-1

USN-3121-1

USN-3130-1

USN-3154-1

Affected Products

Centos

Ibm Aix

Java Platform

Java Se Embedded

Oracle Java Se

Red Hat

Suse

Ubuntu

References · 393

• https://ubuntu.com/security/CVE-2016-5573 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3121-1 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2016-2137.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:2953-1 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2016-2090.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2016-2088.html · Vendor Advisory
• http://oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-5542 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2016-0359 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2016-2089.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2016-2138.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10197-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-5573 · Security Note
• https://ubuntu.com/security/CVE-2016-5597 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:3068-1 · Vendor Advisory