Skip to content
OpenAdvisories
Unscored CVE-2016-3443 EUVD-2016-4469GHSA-wf68-w3c3-xjhm

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availab…

Published Apr 21, 2016 · Updated Oct 15, 2024 · Assigned by oracle

Description

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D. NOTE: the previous information is from the April 2016 CPU. Oracle has not commented on third-party claims that this issue allows remote attackers to obtain sensitive information via crafted font data, which triggers an out-of-bounds read.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 7 java-1.7.1-ibm +5 1:1.7.1.3.40-1jpp.1.el7 RHSA-2016:0701
RHEL 7 java-1.8.0-ibm +5 1:1.8.0.3.0-1jpp.1.el7 RHSA-2016:0716
RHEL 6 java-1.6.0-ibm +6 1:1.6.0.16.25-1jpp.1.el6_7 RHSA-2016:0708
RHEL 6 java-1.7.1-ibm +5 1:1.7.1.3.40-1jpp.1.el6_7 RHSA-2016:0701
RHEL 6 java-1.8.0-ibm +5 1:1.8.0.3.0-1jpp.1.el6 RHSA-2016:1039
RHEL 5 java-1.6.0-ibm +7 1:1.6.0.16.25-1jpp.1.el5 RHSA-2016:0708
RHEL 5 java-1.7.0-ibm +5 1:1.7.0.9.40-1jpp.1.el5 RHSA-2016:0702
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Rhel Extras Oracle Java 7 java-1.6.0-sun +5 1:1.6.0.115-1jpp.1.el7 RHSA-2016:0679
Red Hat Rhel Extras Oracle Java 7 java-1.7.0-oracle +5 1:1.7.0.101-1jpp.1.el7 RHSA-2016:0678
Red Hat Rhel Extras Oracle Java 7 java-1.8.0-oracle +5 1:1.8.0.91-1jpp.1.el7 RHSA-2016:0677
Red Hat Rhel Extras Oracle Java 6 java-1.6.0-sun +5 1:1.6.0.115-1jpp.1.el6_7 RHSA-2016:0679
Red Hat Rhel Extras Oracle Java 6 java-1.7.0-oracle +5 1:1.7.0.101-1jpp.1.el6_7 RHSA-2016:0678
Red Hat Rhel Extras Oracle Java 6 java-1.8.0-oracle +5 1:1.8.0.91-1jpp.1.el6_7 RHSA-2016:0677
Red Hat Rhel Extras Oracle Java 5 java-1.6.0-sun +5 1:1.6.0.115-1jpp.1.el5_11 RHSA-2016:0679
Red Hat Rhel Extras Oracle Java 5 java-1.7.0-oracle +5 1:1.7.0.101-1jpp.1.el5_11 RHSA-2016:0678
Red Hat Network Satellite 5 java-1.7.0-ibm +1 1:1.7.0.9.40-1jpp.1.el5 RHSA-2016:1430
Red Hat Network Satellite 5 java-1.7.1-ibm +1 1:1.7.1.3.40-1jpp.1.el6_7 RHSA-2017:1216, RHSA-2016:1430
Red Hat Network Satellite 5 spacewalk-java +5 2.0.2-109.el5sat RHSA-2016:1430

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 12 SP1 java-1_7_1-ibm 1.7.1_sr3.40-25.1 SUSE-SU-2016:1299-1
SLES 12 SP1 java-1_8_0-ibm 1.8.0_sr3.0-10.1 SUSE-SU-2016:1475-1
SLES 12 java-1_6_0-ibm 1.6.0_sr16.25-34.1 SUSE-SU-2016:1458-1, SUSE-SU-2016:1303-1
SLES 12 java-1_7_1-ibm 1.7.1_sr3.40-25.1 SUSE-SU-2016:1299-1
SLES 11 SP4 java-1_7_1-ibm 1.7.1_sr3.40-13.1 SUSE-SU-2016:1300-1
SLES 11 SP3 java-1_6_0-ibm 1.6.0_sr16.25-69.1 SUSE-SU-2016:1379-1
SLES 11 SP3 java-1_7_0-ibm 1.7.0_sr9.40-52.1 SUSE-SU-2016:1378-1
SLES 11 SP2 java-1_6_0-ibm 1.6.0_sr16.25-69.1 SUSE-SU-2016:1379-1
SLES 11 SP2 java-1_7_0-ibm 1.7.0_sr9.40-52.1 SUSE-SU-2016:1378-1
Show 6 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 12 SP1 java-1_7_1-ibm 1.7.1_sr3.40-25.1 SUSE-SU-2016:1299-1
SLES for SAP 12 SP1 java-1_8_0-ibm 1.8.0_sr3.0-10.1 SUSE-SU-2016:1475-1
SLES for SAP 12 java-1_7_1-ibm 1.7.1_sr3.40-25.1 SUSE-SU-2016:1299-1
SLES for SAP 11 SP4 java-1_7_1-ibm 1.7.1_sr3.40-13.1 SUSE-SU-2016:1300-1
SUSE OpenStack Cloud 5 java-1_6_0-ibm 1.6.0_sr16.25-69.1 SUSE-SU-2016:1379-1
SUSE OpenStack Cloud 5 java-1_7_0-ibm 1.7.0_sr9.40-52.1 SUSE-SU-2016:1378-1
SUSE Manager Proxy 2.1 java-1_6_0-ibm 1.6.0_sr16.25-69.1 SUSE-SU-2016:1379-1
SUSE Manager Proxy 2.1 java-1_7_0-ibm 1.7.0_sr9.40-52.1 SUSE-SU-2016:1378-1
SUSE Manager 2.1 java-1_6_0-ibm 1.6.0_sr16.25-69.1 SUSE-SU-2016:1379-1
SUSE Manager 2.1 java-1_7_0-ibm 1.7.0_sr9.40-52.1 SUSE-SU-2016:1378-1

Advisories 18

References