Patchwire CVEs, their patch status, and feeds to follow them

CVE-2016-0376

Fixed in a distro release EPSS 6%

The com.ibm.rmi.io.SunSerializableFactory class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40 (7.1.3.40), and 8 before SR3 (8.0.3.0) does not properly deserialize classes in an AccessController doPrivileged block, which allows remote attackers to bypass a sandbox protection mechanism and execute arbitrary code as demonstrated by the readValue method of the com.ibm.rmi.io.ValueHandlerPool.ValueHandlerSingleton class, which implements the javax.rmi.CORBA.ValueHandler interface. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-5456.

Published 2016-06-03 · CVE record · OSV

Products: novell suse_linux_enterprise_software_development_kit, novell suse_linux_enterprise_module_for_legacy_software, novell suse_linux_enterprise_server, novell suse_manager, novell suse_manager_proxy, novell suse_openstack_cloud, ibm java_sdk, redhat satellite, redhat enterprise_linux_desktop, redhat enterprise_linux_hpc_node_supplementary, redhat enterprise_linux_server, redhat enterprise_linux_server_eus, redhat enterprise_linux_workstation

Distro releases

ReleasePackageFixed in
Red Hat network satellite 5.6java-1.7.0-ibm1:1.7.0.9.40-1jpp.1.el5
Red Hat network satellite 5.6java-1.7.0-ibm-devel1:1.7.0.9.40-1jpp.1.el5
Red Hat network satellite 5.6java-1.7.1-ibm1:1.7.1.3.40-1jpp.1.el6_7
Red Hat network satellite 5.6java-1.7.1-ibm1:1.7.1.4.1-1jpp.1.el6_8
Red Hat network satellite 5.6java-1.7.1-ibm-devel1:1.7.1.4.1-1jpp.1.el6_8
Red Hat network satellite 5.6java-1.7.1-ibm-devel1:1.7.1.3.40-1jpp.1.el6_7
Red Hat network satellite 5.6spacewalk-java0:2.0.2-109.el5sat
Red Hat network satellite 5.6spacewalk-java0:2.0.2-109.el6sat
Red Hat network satellite 5.6spacewalk-java-config0:2.0.2-109.el5sat
Red Hat network satellite 5.6spacewalk-java-config0:2.0.2-109.el6sat
Red Hat network satellite 5.6spacewalk-java-lib0:2.0.2-109.el5sat
Red Hat network satellite 5.6spacewalk-java-lib0:2.0.2-109.el6sat
Red Hat network satellite 5.6spacewalk-java-oracle0:2.0.2-109.el5sat
Red Hat network satellite 5.6spacewalk-java-oracle0:2.0.2-109.el6sat
Red Hat network satellite 5.6spacewalk-java-postgresql0:2.0.2-109.el5sat
Red Hat network satellite 5.6spacewalk-java-postgresql0:2.0.2-109.el6sat
Red Hat network satellite 5.6spacewalk-taskomatic0:2.0.2-109.el5sat
Red Hat network satellite 5.6spacewalk-taskomatic0:2.0.2-109.el6sat
Red Hat network satellite 5.7java-1.7.1-ibm1:1.7.1.3.40-1jpp.1.el6_7
Red Hat network satellite 5.7java-1.7.1-ibm1:1.7.1.4.1-1jpp.1.el6_8
Red Hat network satellite 5.7java-1.7.1-ibm-devel1:1.7.1.4.1-1jpp.1.el6_8
Red Hat network satellite 5.7java-1.7.1-ibm-devel1:1.7.1.3.40-1jpp.1.el6_7
Red Hat network satellite 5.7spacewalk-java0:2.3.8-146.el6sat
Red Hat network satellite 5.7spacewalk-java-config0:2.3.8-146.el6sat
Red Hat network satellite 5.7spacewalk-java-lib0:2.3.8-146.el6sat
Red Hat network satellite 5.7spacewalk-java-oracle0:2.3.8-146.el6sat
Red Hat network satellite 5.7spacewalk-java-postgresql0:2.3.8-146.el6sat
Red Hat network satellite 5.7spacewalk-taskomatic0:2.3.8-146.el6sat
Red Hat rhel extras 5java-1.6.0-ibm1:1.6.0.16.25-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-ibm-accessibility1:1.6.0.16.25-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-ibm-demo1:1.6.0.16.25-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-ibm-devel1:1.6.0.16.25-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-ibm-javacomm1:1.6.0.16.25-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-ibm-jdbc1:1.6.0.16.25-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-ibm-plugin1:1.6.0.16.25-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-ibm-src1:1.6.0.16.25-1jpp.1.el5
Red Hat rhel extras 5java-1.7.0-ibm1:1.7.0.9.40-1jpp.1.el5
Red Hat rhel extras 5java-1.7.0-ibm-demo1:1.7.0.9.40-1jpp.1.el5
Red Hat rhel extras 5java-1.7.0-ibm-devel1:1.7.0.9.40-1jpp.1.el5
Red Hat rhel extras 5java-1.7.0-ibm-jdbc1:1.7.0.9.40-1jpp.1.el5
Red Hat rhel extras 5java-1.7.0-ibm-plugin1:1.7.0.9.40-1jpp.1.el5
Red Hat rhel extras 5java-1.7.0-ibm-src1:1.7.0.9.40-1jpp.1.el5
Red Hat rhel extras 6java-1.6.0-ibm1:1.6.0.16.25-1jpp.1.el6_7
Red Hat rhel extras 6java-1.6.0-ibm-demo1:1.6.0.16.25-1jpp.1.el6_7
Red Hat rhel extras 6java-1.6.0-ibm-devel1:1.6.0.16.25-1jpp.1.el6_7
Red Hat rhel extras 6java-1.6.0-ibm-javacomm1:1.6.0.16.25-1jpp.1.el6_7
Red Hat rhel extras 6java-1.6.0-ibm-jdbc1:1.6.0.16.25-1jpp.1.el6_7
Red Hat rhel extras 6java-1.6.0-ibm-plugin1:1.6.0.16.25-1jpp.1.el6_7
Red Hat rhel extras 6java-1.6.0-ibm-src1:1.6.0.16.25-1jpp.1.el6_7
Red Hat rhel extras 6java-1.7.1-ibm1:1.7.1.3.40-1jpp.1.el6_7
Red Hat rhel extras 6java-1.7.1-ibm-demo1:1.7.1.3.40-1jpp.1.el6_7
Red Hat rhel extras 6java-1.7.1-ibm-devel1:1.7.1.3.40-1jpp.1.el6_7
Red Hat rhel extras 6java-1.7.1-ibm-jdbc1:1.7.1.3.40-1jpp.1.el6_7
Red Hat rhel extras 6java-1.7.1-ibm-plugin1:1.7.1.3.40-1jpp.1.el6_7
Red Hat rhel extras 6java-1.7.1-ibm-src1:1.7.1.3.40-1jpp.1.el6_7
Red Hat rhel extras 6java-1.8.0-ibm1:1.8.0.3.0-1jpp.1.el6
Red Hat rhel extras 6java-1.8.0-ibm-demo1:1.8.0.3.0-1jpp.1.el6
Red Hat rhel extras 6java-1.8.0-ibm-devel1:1.8.0.3.0-1jpp.1.el6
Red Hat rhel extras 6java-1.8.0-ibm-jdbc1:1.8.0.3.0-1jpp.1.el6
Red Hat rhel extras 6java-1.8.0-ibm-plugin1:1.8.0.3.0-1jpp.1.el6
Red Hat rhel extras 6java-1.8.0-ibm-src1:1.8.0.3.0-1jpp.1.el6
Red Hat rhel extras 7java-1.7.1-ibm1:1.7.1.3.40-1jpp.1.el7
Red Hat rhel extras 7java-1.7.1-ibm-demo1:1.7.1.3.40-1jpp.1.el7
Red Hat rhel extras 7java-1.7.1-ibm-devel1:1.7.1.3.40-1jpp.1.el7
Red Hat rhel extras 7java-1.7.1-ibm-jdbc1:1.7.1.3.40-1jpp.1.el7
Red Hat rhel extras 7java-1.7.1-ibm-plugin1:1.7.1.3.40-1jpp.1.el7
Red Hat rhel extras 7java-1.7.1-ibm-src1:1.7.1.3.40-1jpp.1.el7
Red Hat rhel extras 7java-1.8.0-ibm1:1.8.0.3.0-1jpp.1.el7
Red Hat rhel extras 7java-1.8.0-ibm-demo1:1.8.0.3.0-1jpp.1.el7
Red Hat rhel extras 7java-1.8.0-ibm-devel1:1.8.0.3.0-1jpp.1.el7
Red Hat rhel extras 7java-1.8.0-ibm-jdbc1:1.8.0.3.0-1jpp.1.el7
Red Hat rhel extras 7java-1.8.0-ibm-plugin1:1.8.0.3.0-1jpp.1.el7
Red Hat rhel extras 7java-1.8.0-ibm-src1:1.8.0.3.0-1jpp.1.el7
SUSE Linux Enterprise Module for Legacy 12java-1_6_0-ibm1.6.0_sr16.25-34.1
SUSE Linux Enterprise Module for Legacy 12java-1_6_0-ibm1.6.0_sr16.26-37.1
SUSE Linux Enterprise Server 11 SP2-LTSSjava-1_6_0-ibm1.6.0_sr16.25-69.1
SUSE Linux Enterprise Server 11 SP2-LTSSjava-1_7_0-ibm1.7.0_sr9.40-52.1
SUSE Linux Enterprise Server 11 SP3-LTSSjava-1_6_0-ibm1.6.0_sr16.25-69.1
SUSE Linux Enterprise Server 11 SP3-LTSSjava-1_7_0-ibm1.7.0_sr9.40-52.1
SUSE Linux Enterprise Server 11 SP3-TERADATAjava-1_6_0-ibm1.6.0_sr16.25-69.1
SUSE Linux Enterprise Server 11 SP3-TERADATAjava-1_7_0-ibm1.7.0_sr9.40-52.1
SUSE Linux Enterprise Server 11 SP4java-1_7_1-ibm1.7.1_sr3.40-13.1
SUSE Linux Enterprise Server 12java-1_7_1-ibm1.7.1_sr3.40-25.1
SUSE Linux Enterprise Server 12 SP1java-1_7_1-ibm1.7.1_sr3.40-25.1
SUSE Linux Enterprise Server 12 SP1java-1_8_0-ibm1.8.0_sr3.0-10.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4java-1_7_1-ibm1.7.1_sr3.40-13.1
SUSE Linux Enterprise Server for SAP Applications 12java-1_7_1-ibm1.7.1_sr3.40-25.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1java-1_7_1-ibm1.7.1_sr3.40-25.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1java-1_8_0-ibm1.8.0_sr3.0-10.1
SUSE Linux Enterprise Software Development Kit 11 SP4java-1_7_1-ibm1.7.1_sr3.40-13.1
SUSE Linux Enterprise Software Development Kit 12java-1_7_1-ibm1.7.1_sr3.40-25.1
SUSE Linux Enterprise Software Development Kit 12 SP1java-1_7_1-ibm1.7.1_sr3.40-25.1
SUSE Linux Enterprise Software Development Kit 12 SP1java-1_8_0-ibm1.8.0_sr3.0-10.1
SUSE Manager 2.1java-1_6_0-ibm1.6.0_sr16.25-69.1
SUSE Manager 2.1java-1_7_0-ibm1.7.0_sr9.40-52.1
SUSE Manager Proxy 2.1java-1_6_0-ibm1.6.0_sr16.25-69.1
SUSE Manager Proxy 2.1java-1_7_0-ibm1.7.0_sr9.40-52.1
SUSE OpenStack Cloud 5java-1_6_0-ibm1.6.0_sr16.25-69.1
SUSE OpenStack Cloud 5java-1_7_0-ibm1.7.0_sr9.40-52.1