RHSA-2017:1216 — Red Hat Security Advisory: java-1.7.1-ibm security update

Fixed packages 4

Release	Package	Fixed in
Red Hat · Network Satellite 5 network_satellite:5.6::el6	java-1.7.1-ibm	1:1.7.1.4.1-1jpp.1.el6_8
Red Hat · Network Satellite 5 network_satellite:5.6::el6	java-1.7.1-ibm-devel	1:1.7.1.4.1-1jpp.1.el6_8
Red Hat · Network Satellite 5 network_satellite:5.7::el6	java-1.7.1-ibm	1:1.7.1.4.1-1jpp.1.el6_8
Red Hat · Network Satellite 5 network_satellite:5.7::el6	java-1.7.1-ibm-devel	1:1.7.1.4.1-1jpp.1.el6_8

Vulnerabilities 31

Critical 9.8

CVE-2016-3427 Exploited EPSS 92%

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows re…

openjdk-8 openjdk-7 openjdk-6 Ubuntu

Apr 21, 2016
KEV May 12, 2023
High 7.5

CVE-2016-2183 Public exploit EPSS 95%

The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a b…

openjdk-8 openssl openjdk-7 openssl Ubuntu Alpine

Sep 1, 2016
Unscored —

CVE-2016-0264

Buffer overflow in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6…

May 24, 2016
Unscored —

CVE-2016-0363

The com.ibm.CORBA.iiop.ClientDelegate class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 be…

Jun 3, 2016
Unscored —

CVE-2016-0376

The com.ibm.rmi.io.SunSerializableFactory class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R…

Jun 3, 2016
Unscored —

CVE-2016-0686

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 and Java SE Embedded 8u77 allows remote attackers to …

openjdk-8 openjdk-7 openjdk-6 Ubuntu

Apr 21, 2016
Unscored —

CVE-2016-0687

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 and Java SE Embedded 8u77 allows remote attackers to …

openjdk-8 openjdk-7 openjdk-6 Ubuntu

Apr 21, 2016
Unscored —

CVE-2016-3422

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect availability via ve…

Apr 21, 2016
Unscored —

CVE-2016-3426

Unspecified vulnerability in Oracle Java SE 8u77 and Java SE Embedded 8u77 allows remote attackers to affect confidenti…

openjdk-8 Ubuntu

Apr 21, 2016
Unscored —

CVE-2016-3443

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, in…

Apr 21, 2016
Unscored —

CVE-2016-3449

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, in…

Apr 21, 2016
Unscored —

CVE-2016-3511

Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 allows local users to affect confidentiality, integrity, and…

Jul 21, 2016
Unscored —

CVE-2016-3598

Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidenti…

openjdk-8 openjdk-7 Ubuntu

Jul 21, 2016
Unscored —

CVE-2016-5542

Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to …

openjdk-8 openjdk-7 openjdk-6 Ubuntu

Oct 25, 2016
Unscored —

CVE-2016-5546

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supporte…

Oracle Java SE Java SE Embedded JRockit Ubuntu

Jan 27, 2017
Unscored —

CVE-2016-5547

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supporte…

Oracle Java SE Java SE Embedded JRockit Ubuntu

Jan 27, 2017
Unscored —

CVE-2016-5548

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported version…

Oracle Java SE Java SE Embedded openjdk-8 Ubuntu

Jan 27, 2017
Unscored —

CVE-2016-5549

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported version…

Oracle Java SE Java SE Embedded openjdk-8 Ubuntu

Jan 27, 2017
Unscored —

CVE-2016-5552

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Support…

Oracle Java SE Java SE Embedded JRockit Ubuntu

Jan 27, 2017
Unscored —

CVE-2016-5554

Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to …

openjdk-8 openjdk-7 openjdk-6 Ubuntu

Oct 25, 2016
Unscored —

CVE-2016-5556

Unspecified vulnerability in Oracle Java SE 6u121, 7u111, and 8u102 allows remote attackers to affect confidentiality, …

Oct 25, 2016
Unscored —

CVE-2016-5573

Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to …

openjdk-8 openjdk-7 openjdk-6 Ubuntu

Oct 25, 2016
Unscored —

CVE-2016-5597

Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to …

openjdk-8 openjdk-7 openjdk-6 Ubuntu

Oct 25, 2016
Unscored —

CVE-2017-3231

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versio…

Oracle Java SE Java SE Embedded openjdk-8 Ubuntu

Jan 27, 2017
Unscored —

CVE-2017-3241 Public exploit EPSS 33%

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: RMI). Supported vers…

Oracle Java SE Java SE Embedded JRockit Ubuntu

Jan 27, 2017
Unscored —

CVE-2017-3252

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAAS). Supported ver…

openjdk-8 openjdk-7 openjdk-6 Ubuntu

Jan 27, 2017
Unscored —

CVE-2017-3253

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D). Supported versi…

Oracle Java SE Java SE Embedded JRockit Ubuntu

Jan 27, 2017
Unscored —

CVE-2017-3259

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affect…

Oracle Java SE

Jan 27, 2017
Unscored —

CVE-2017-3261

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versio…

openjdk-8 openjdk-7 openjdk-6 Ubuntu

Jan 27, 2017
Unscored —

CVE-2017-3272

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported version…

Oracle Java SE Java SE Embedded openjdk-8 Ubuntu

Jan 27, 2017
Unscored —

CVE-2017-3289

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions …

Oracle Java SE Java SE Embedded openjdk-8 Ubuntu

Jan 27, 2017

References

report
https://bugzilla.redhat.com/show_bug.cgi?id=1327743
report
https://bugzilla.redhat.com/show_bug.cgi?id=1327749
report
https://bugzilla.redhat.com/show_bug.cgi?id=1328059
article
https://access.redhat.com/security/updates/classification/#moderate
report
https://bugzilla.redhat.com/show_bug.cgi?id=1328210
report
https://bugzilla.redhat.com/show_bug.cgi?id=1328618
report
https://bugzilla.redhat.com/show_bug.cgi?id=1328619
report
https://bugzilla.redhat.com/show_bug.cgi?id=1328620
report
https://bugzilla.redhat.com/show_bug.cgi?id=1330986
report
https://bugzilla.redhat.com/show_bug.cgi?id=1331359
report
https://bugzilla.redhat.com/show_bug.cgi?id=1356971
report
https://bugzilla.redhat.com/show_bug.cgi?id=1358168
report
https://bugzilla.redhat.com/show_bug.cgi?id=1369383
report
https://bugzilla.redhat.com/show_bug.cgi?id=1385544
report
https://bugzilla.redhat.com/show_bug.cgi?id=1385714
report
https://bugzilla.redhat.com/show_bug.cgi?id=1385723
report
https://bugzilla.redhat.com/show_bug.cgi?id=1386103
report
https://bugzilla.redhat.com/show_bug.cgi?id=1386408
report
https://bugzilla.redhat.com/show_bug.cgi?id=1413554
report
https://bugzilla.redhat.com/show_bug.cgi?id=1413562
report
https://bugzilla.redhat.com/show_bug.cgi?id=1413583
report
https://bugzilla.redhat.com/show_bug.cgi?id=1413653
report
https://bugzilla.redhat.com/show_bug.cgi?id=1413717
report
https://bugzilla.redhat.com/show_bug.cgi?id=1413764
report
https://bugzilla.redhat.com/show_bug.cgi?id=1413882
report
https://bugzilla.redhat.com/show_bug.cgi?id=1413906
report
https://bugzilla.redhat.com/show_bug.cgi?id=1413911
report
https://bugzilla.redhat.com/show_bug.cgi?id=1413920
report
https://bugzilla.redhat.com/show_bug.cgi?id=1413923
report
https://bugzilla.redhat.com/show_bug.cgi?id=1413955
report
https://bugzilla.redhat.com/show_bug.cgi?id=1324044
report
https://bugzilla.redhat.com/show_bug.cgi?id=1414163
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1216.json
report
https://access.redhat.com/security/cve/CVE-2016-0264
advisory
https://www.cve.org/CVERecord?id=CVE-2016-0264
advisory
https://nvd.nist.gov/vuln/detail/CVE-2016-0264
article
http://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_April_2016
report
https://access.redhat.com/security/cve/CVE-2016-0363
advisory
https://www.cve.org/CVERecord?id=CVE-2016-0363

Red Hat Security Advisory: java-1.7.1-ibm security update

Fixed packages 4

Vulnerabilities 31

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows re…

The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a b…

Buffer overflow in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6…

The com.ibm.CORBA.iiop.ClientDelegate class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 be…

The com.ibm.rmi.io.SunSerializableFactory class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R…

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 and Java SE Embedded 8u77 allows remote attackers to …

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 and Java SE Embedded 8u77 allows remote attackers to …

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect availability via ve…

Unspecified vulnerability in Oracle Java SE 8u77 and Java SE Embedded 8u77 allows remote attackers to affect confidenti…

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, in…

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, in…

Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 allows local users to affect confidentiality, integrity, and…

Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidenti…

Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to …

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supporte…

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supporte…

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported version…

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported version…

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Support…

Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to …

Unspecified vulnerability in Oracle Java SE 6u121, 7u111, and 8u102 allows remote attackers to affect confidentiality, …

Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to …

Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to …

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versio…

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: RMI). Supported vers…

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAAS). Supported ver…

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D). Supported versi…

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affect…

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versio…

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported version…

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions …

References