Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.

The version of IBM Java installed on the remote host is prior to 6.0 < 6.0.16.20 / 6.1 < 6.1.8.20 / 7.0 < 7.0.9.30 / 7.1 < 7.1.3.30 / 8.0 < 8.0.2.10. It is, therefore, affected by multiple vulnerabilities as referenced in the Oracle January 19 2016 CPU advisory.

  - Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and     Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2     Handshake Protocol traffic, which makes it easier for man-in-the-middle attackers to spoof servers by     triggering a collision. (CVE-2015-7575)

  - Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64,     1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x before 1.6.19     allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other     impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image. (CVE-2015-8126)

  - Buffer overflow in the png_set_PLTE function in libpng before 1.0.65, 1.1.x and 1.2.x before 1.2.55,     1.3.x, 1.4.x before 1.4.18, 1.5.x before 1.5.25, and 1.6.x before 1.6.20 allows remote attackers to cause     a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth     value in an IHDR (aka image header) chunk in a PNG image. NOTE: this vulnerability exists because of an     incomplete fix for CVE-2015-8126. (CVE-2015-8472)

  - Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91,     and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect integrity via unknown vectors related     to Networking. (CVE-2016-0402)

  - Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91,     and 8u66, and Java SE Embedded 8u65 allows remote authenticated users to affect confidentiality via     vectors related to JMX. (CVE-2016-0448)

  - Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE     6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect     availability via vectors related to JAXP. (CVE-2016-0466)

  - Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 8u66;
    Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect confidentiality and integrity     via unknown vectors related to Libraries. (CVE-2016-0475)

  - Unspecified vulnerability in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit     R28.3.8 allows remote attackers to affect confidentiality, integrity, and availability via vectors related     to AWT. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-     party claims that this is a heap-based buffer overflow in the readImage function, which allows remote     attackers to execute arbitrary code via crafted image data. (CVE-2016-0483)

  - Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91,     and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect confidentiality, integrity, and     availability via unknown vectors related to 2D. (CVE-2016-0494)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Oracle (formerly Sun) Java SE or Java for Business installed on the remote host is prior to 8 Update 71, 7 Update 95, or 6 Update 111. It is, therefore, affected by security vulnerabilities in the following components :

 - 2D
 - AWT
 - JAXP
 - JMX
 - Libraries
 - Networking
 - Security

The remote host is affected by the vulnerability described in GLSA-201610-08 (Oracle JRE/JDK: Multiple vulnerabilities)

    Multiple vulnerabilities exist in both Oracle&rsquo;s JRE and JDK. Please       review the referenced CVE&rsquo;s for additional information.
  Impact :

    Remote attackers could gain access to information, remotely execute       arbitrary code, or cause Denial of Service.
  Workaround :

    There is no known workaround at this time.

The version of Java SDK installed on the remote AIX host is affected by multiple vulnerabilities in the following components :

  - 2D
  - AWT
  - IBM J9 JVM
  - JAXP
  - JMX
  - Libraries
  - Networking
  - Security

This update for java-1_8_0-ibm fixes the following security issues by updating to 8.0-2.10 (bsc#963937) :

  - CVE-2015-5041: Could could have invoked non-public     interface methods under certain circumstances

  - CVE-2015-7575: The TLS protocol could allow weaker than     expected security caused by a collision attack when     using the MD5 hash function for signing a     ServerKeyExchange message during a TLS handshake. An     attacker could exploit this vulnerability using     man-in-the-middle techniques to impersonate a TLS server     and obtain credentials

  - CVE-2015-8126: buffer overflow in libpng caused by     improper bounds checking by the png_set_PLTE() and     png_get_PLTE() functions

  - CVE-2015-8472: buffer overflow in libpng caused by     improper bounds checking by the png_set_PLTE() and     png_get_PLTE() functions

  - CVE-2016-0402: An unspecified vulnerability related to     the Networking component has no confidentiality impact,     partial integrity impact, and no availability impact

  - CVE-2016-0448: An unspecified vulnerability related to     the JMX component could allow a remote attacker to     obtain sensitive information

  - CVE-2016-0466: An unspecified vulnerability related to     the JAXP component could allow a remote attacker to     cause a denial of service

  - CVE-2016-0475: An unspecified vulnerability related to     the Libraries component has partial confidentiality     impact, partial integrity impact, and no availability     impact

  - CVE-2016-0483: An unspecified vulnerability related to     the AWT component has complete confidentiality impact,     complete integrity impact, and complete availability     impact

  - CVE-2016-0494: An unspecified vulnerability related to     the 2D component has complete confidentiality impact,     complete integrity impact, and complete availability     impact

The following bugs were fixed :

  - bsc#960402: resolve package conflicts in devel package

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An out-of-bounds write flaw was found in the JPEG image format decoder in the AWT component in OpenJDK. A specially crafted JPEG image could cause a Java application to crash or, possibly execute arbitrary code.
An untrusted Java application or applet could use this flaw to bypass Java sandbox restrictions. (CVE-2016-0483)

A flaw was found in the way TLS 1.2 could use the MD5 hash function for signing ServerKeyExchange and Client Authentication packets during a TLS handshake. A man-in-the-middle attacker able to force a TLS connection to use the MD5 hash function could use this flaw to conduct collision attacks to impersonate a TLS server or an authenticated TLS client. (CVE-2015-7575)

Integer signedness issues were discovered in IndicRearrangementProcessor and IndicRearrangementProcessor2 in the ICU Layout Engine. A specially crafted font file could cause an application using ICU to parse untrusted fonts to crash and, possibly, execute arbitrary code. (CVE-2016-0494)

It was discovered that the password-based encryption (PBE) implementation in the Libraries component in OpenJDK used an incorrect key length. This could, in certain cases, lead to generation of keys that were weaker than expected. (CVE-2016-0475)

A flaw was found in the deserialization of the URL class in the Networking component of OpenJDK. Deserialization of the specially crafted data could result in creation of the URL object with an inconsistent state. An untrusted Java application or applet could use this flaw to bypass certain Java sandbox restrictions. (CVE-2016-0402)

It was discovered that the JAXP component in OpenJDK did not properly enforce the totalEntitySizeLimit limit. An attacker able to make a Java application process a specially crafted XML file could use this flaw to make the application consume an excessive amount of memory.
(CVE-2016-0466)

It was discovered that the RMIConnector and RMIConnectionImpl classes in the JMX component of OpenJDK could log sensitive information such as user passwords in its debug log, possibly leading the exposure of the information. (CVE-2016-0448)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:0098 advisory.

  - IBM JDK: J9 JVM allows code to invoke non-public interface methods (CVE-2015-5041)

  - TLS 1.2 Transcipt Collision attacks against MD5 in key exchange protocol (SLOTH) (CVE-2015-7575)

  - libpng: Buffer overflow vulnerabilities in png_get_PLTE/png_set_PLTE functions (CVE-2015-8126,     CVE-2015-8472)

  - OpenJDK: URL deserialization inconsistencies (Networking, 8059054) (CVE-2016-0402)

  - OpenJDK: logging of RMI connection secrets (JMX, 8130710) (CVE-2016-0448)

  - OpenJDK: insufficient enforcement of totalEntitySizeLimit (JAXP, 8133962) (CVE-2016-0466)

  - OpenJDK: PBE incorrect key lengths (Libraries, 8138589) (CVE-2016-0475)

  - OpenJDK: incorrect boundary check in JPEG decoder (AWT, 8139017) (CVE-2016-0483)

  - ICU: integer signedness issue in IndicRearrangementProcessor (OpenJDK 2D, 8140543) (CVE-2016-0494)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

java-1_8_0-openjdk was updated to version 7u95 to fix several security issues. (bsc#962743)

The following vulnerabilities were fixed :

  - CVE-2015-7575: Further reduce use of MD5 (SLOTH)     (bsc#960996)

  - CVE-2015-8126: Vulnerability in the AWT component     related to splashscreen displays

  - CVE-2015-8472: Vulnerability in the AWT component,     addressed by same fix

  - CVE-2016-0402: Vulnerability in the Networking component     related to URL processing

  - CVE-2016-0448: Vulnerability in the JMX comonent related     to attribute processing

  - CVE-2016-0466: Vulnerability in the JAXP component,     related to limits

  - CVE-2016-0483: Vulnerability in the AWT component     related to image decoding

  - CVE-2016-0494: Vulnerability in 2D component related to     font actions

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An out-of-bounds write flaw was found in the JPEG image format decoder in the AWT component in OpenJDK. A specially crafted JPEG image could cause a Java application to crash or, possibly execute arbitrary code.
An untrusted Java application or applet could use this flaw to bypass Java sandbox restrictions. (CVE-2016-0483)

An integer signedness issue was found in the font parsing code in the 2D component in OpenJDK. A specially crafted font file could possibly cause the Java Virtual Machine to execute arbitrary code, allowing an untrusted Java application or applet to bypass Java sandbox restrictions. (CVE-2016-0494)

It was discovered that the password-based encryption (PBE) implementation in the Libraries component in OpenJDK used an incorrect key length. This could, in certain cases, lead to generation of keys that were weaker than expected. (CVE-2016-0475)

It was discovered that the JAXP component in OpenJDK did not properly enforce the totalEntitySizeLimit limit. An attacker able to make a Java application process a specially crafted XML file could use this flaw to make the application consume an excessive amount of memory.
(CVE-2016-0466)

A flaw was found in the way TLS 1.2 could use the MD5 hash function for signing ServerKeyExchange and Client Authentication packets during a TLS handshake. A man-in-the-middle attacker able to force a TLS connection to use the MD5 hash function could use this flaw to conduct collision attacks to impersonate a TLS server or an authenticated TLS client. (CVE-2015-7575)

Multiple flaws were discovered in the Networking and JMX components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass certain Java sandbox restrictions. (CVE-2016-0402, CVE-2016-0448)

Note: If the web browser plug-in provided by the icedtea-web package was installed, the issues exposed via Java applets could have been exploited without user interaction if a user visited a malicious website.

Note: This update also disallows the use of the MD5 hash algorithm in the certification path processing. The use of MD5 can be re-enabled by removing MD5 from the jdk.certpath.disabledAlgorithms security property defined in the java.security file.

All running instances of OpenJDK Java must be restarted for the update to take effect.

Updated java-1.8.0-oracle packages that fix several security issues are now available for Oracle Java for Red Hat Enterprise Linux 6 and 7.

Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Oracle Java SE version 8 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit.

This update fixes several vulnerabilities in the Oracle Java Runtime Environment and the Oracle Java Software Development Kit. Further information about these flaws can be found on the Oracle Java SE Critical Patch Update Advisory page, listed in the References section.
(CVE-2015-7575, CVE-2015-8126, CVE-2015-8472, CVE-2016-0402, CVE-2016-0448, CVE-2016-0466, CVE-2016-0475, CVE-2016-0483, CVE-2016-0494)

Note: This update also disallows the use of the MD5 hash algorithm in the certification path processing. The use of MD5 can be re-enabled by removing MD5 from the jdk.certpath.disabledAlgorithms security property defined in the java.security file.

All users of java-1.8.0-oracle are advised to upgrade to these updated packages, which provide Oracle Java 8 Update 71 and resolve these issues. All running instances of Oracle Java must be restarted for the update to take effect.

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-0050 advisory.

    [1:1.8.0.71-1.b15]
    - Add patch to turn off strict overflow on IndicRearrangementProcessor{,2}.cpp
    - Resolves: rhbz#1295751

    [1:1.8.0.71-0.b15]
    - January 2016 security update to u71b15.
    - Improve verbosity and helpfulness of tarball generation script.
    - Update patch documentation using version originally written for Fedora.
    - Drop prelink requirement as we no longer use execstack.
    - Drop ifdefbugfix patch as this is fixed upstream.
    - Provide optional boostrap build and turn it off by default.
    - Add patch for size_t formatting on s390 as size_t != intptr_t there.
    - Resolves: rhbz#1295751

    [1:1.8.0.65-4.b17]
    - Add flag logic back to spec file but disable for now.
    - Restore system-lcms.patch as used in October CPU.
    - Resolves: rhbz#1295751

    [1:1.8.0.65-3.b17]
    - moved to integration forest
    - sync with rhel7
    - Resolves: rhbz#1295751

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Updated java-1.8.0-openjdk packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

An out-of-bounds write flaw was found in the JPEG image format decoder in the AWT component in OpenJDK. A specially crafted JPEG image could cause a Java application to crash or, possibly execute arbitrary code.
An untrusted Java application or applet could use this flaw to bypass Java sandbox restrictions. (CVE-2016-0483)

An integer signedness issue was found in the font parsing code in the 2D component in OpenJDK. A specially crafted font file could possibly cause the Java Virtual Machine to execute arbitrary code, allowing an untrusted Java application or applet to bypass Java sandbox restrictions. (CVE-2016-0494)

It was discovered that the password-based encryption (PBE) implementation in the Libraries component in OpenJDK used an incorrect key length. This could, in certain cases, lead to generation of keys that were weaker than expected. (CVE-2016-0475)

It was discovered that the JAXP component in OpenJDK did not properly enforce the totalEntitySizeLimit limit. An attacker able to make a Java application process a specially crafted XML file could use this flaw to make the application consume an excessive amount of memory.
(CVE-2016-0466)

A flaw was found in the way TLS 1.2 could use the MD5 hash function for signing ServerKeyExchange and Client Authentication packets during a TLS handshake. A man-in-the-middle attacker able to force a TLS connection to use the MD5 hash function could use this flaw to conduct collision attacks to impersonate a TLS server or an authenticated TLS client. (CVE-2015-7575)

Multiple flaws were discovered in the Networking and JMX components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass certain Java sandbox restrictions. (CVE-2016-0402, CVE-2016-0448)

Note: This update also disallows the use of the MD5 hash algorithm in the certification path processing. The use of MD5 can be re-enabled by removing MD5 from the jdk.certpath.disabledAlgorithms security property defined in the java.security file.

All users of java-1.8.0-openjdk are advised to upgrade to these updated packages, which resolve these issues. All running instances of OpenJDK Java must be restarted for the update to take effect.

Updated java-1.8.0-openjdk packages that fix multiple security issues are now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

An out-of-bounds write flaw was found in the JPEG image format decoder in the AWT component in OpenJDK. A specially crafted JPEG image could cause a Java application to crash or, possibly execute arbitrary code.
An untrusted Java application or applet could use this flaw to bypass Java sandbox restrictions. (CVE-2016-0483)

An integer signedness issue was found in the font parsing code in the 2D component in OpenJDK. A specially crafted font file could possibly cause the Java Virtual Machine to execute arbitrary code, allowing an untrusted Java application or applet to bypass Java sandbox restrictions. (CVE-2016-0494)

It was discovered that the password-based encryption (PBE) implementation in the Libraries component in OpenJDK used an incorrect key length. This could, in certain cases, lead to generation of keys that were weaker than expected. (CVE-2016-0475)

It was discovered that the JAXP component in OpenJDK did not properly enforce the totalEntitySizeLimit limit. An attacker able to make a Java application process a specially crafted XML file could use this flaw to make the application consume an excessive amount of memory.
(CVE-2016-0466)

A flaw was found in the way TLS 1.2 could use the MD5 hash function for signing ServerKeyExchange and Client Authentication packets during a TLS handshake. A man-in-the-middle attacker able to force a TLS connection to use the MD5 hash function could use this flaw to conduct collision attacks to impersonate a TLS server or an authenticated TLS client. (CVE-2015-7575)

Multiple flaws were discovered in the Networking and JMX components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass certain Java sandbox restrictions. (CVE-2016-0402, CVE-2016-0448)

Note: If the web browser plug-in provided by the icedtea-web package was installed, the issues exposed via Java applets could have been exploited without user interaction if a user visited a malicious website.

Note: This update also disallows the use of the MD5 hash algorithm in the certification path processing. The use of MD5 can be re-enabled by removing MD5 from the jdk.certpath.disabledAlgorithms security property defined in the java.security file.

All users of java-1.8.0-openjdk are advised to upgrade to these updated packages, which resolve these issues. All running instances of OpenJDK Java must be restarted for the update to take effect.

The version of Oracle (formerly Sun) Java SE or Java for Business installed on the remote host is prior to 8 Update 71, 7 Update 95, or 6 Update 111. It is, therefore, affected by security vulnerabilities in the following components :

  - 2D
  - AWT
  - JAXP
  - JMX
  - Libraries
  - Networking
  - Security

The version of Oracle JRockit installed on the remote Windows host is R28 prior to R28.3.9. It is, therefore, affected by multiple vulnerabilities :

  - An unspecified flaw exists in the Security subcomponent     due to a failure to reject MD5 signatures in the server     signature within the TLS 1.2 ServerKeyExchange messages.
    A man-in-the-middle attacker, by triggering collisions,     can exploit this issue to spoof servers. (CVE-2015-7575)

  - A memory corruption issue exists in the AWT subcomponent     when decoding JPEG files. A remote attacker can exploit     this to execute arbitrary code. (CVE-2016-0483)

  - A collision-based forgery vulnerability, known as SLOTH     (Security Losses from Obsolete and Truncated Transcript     Hashes), exists in the TLS protocol due to accepting     RSA-MD5 signatures in the server signature within the     TLS 1.2 ServerKeyExchange messages during a TLS     handshake. A man-in-the-middle attacker can exploit     this, via a transcript collision attack, to impersonate     a TLS server. (CVE-2015-7575) (CVE-2016-0475)

  - A denial of service vulnerability exists in the JAXP     subcomponent during the handling of expanded general     entities. A remote attacker can exploit this to bypass     the 'totalEntitySizeLimit' restrictions and exhaust     available memory. (CVE-2016-0466)

An out-of-bounds write flaw was found in the JPEG image format decoder in the AWT component in OpenJDK. A specially crafted JPEG image could cause a Java application to crash or, possibly execute arbitrary code.
An untrusted Java application or applet could use this flaw to bypass Java sandbox restrictions. (CVE-2016-0483)

An integer signedness issue was found in the font parsing code in the 2D component in OpenJDK. A specially crafted font file could possibly cause the Java Virtual Machine to execute arbitrary code, allowing an untrusted Java application or applet to bypass Java sandbox restrictions. (CVE-2016-0494)

It was discovered that the password-based encryption (PBE) implementation in the Libraries component in OpenJDK used an incorrect key length. This could, in certain cases, lead to generation of keys that were weaker than expected. (CVE-2016-0475)

It was discovered that the JAXP component in OpenJDK did not properly enforce the totalEntitySizeLimit limit. An attacker able to make a Java application process a specially crafted XML file could use this flaw to make the application consume an excessive amount of memory.
(CVE-2016-0466)

A flaw was found in the way TLS 1.2 could use the MD5 hash function for signing ServerKeyExchange and Client Authentication packets during a TLS handshake. A man-in-the-middle attacker able to force a TLS connection to use the MD5 hash function could use this flaw to conduct collision attacks to impersonate a TLS server or an authenticated TLS client. (CVE-2015-7575)

Multiple flaws were discovered in the Networking and JMX components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass certain Java sandbox restrictions. (CVE-2016-0402, CVE-2016-0448)

Note: This update also disallows the use of the MD5 hash algorithm in the certification path processing. The use of MD5 can be re-enabled by removing MD5 from the jdk.certpath.disabledAlgorithms security property defined in the java.security file.

All running instances of OpenJDK Java must be restarted for the update to take effect.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:0050 advisory.

  - TLS 1.2 Transcipt Collision attacks against MD5 in key exchange protocol (SLOTH) (CVE-2015-7575)

  - OpenJDK: URL deserialization inconsistencies (Networking, 8059054) (CVE-2016-0402)

  - OpenJDK: logging of RMI connection secrets (JMX, 8130710) (CVE-2016-0448)

  - OpenJDK: insufficient enforcement of totalEntitySizeLimit (JAXP, 8133962) (CVE-2016-0466)

  - OpenJDK: PBE incorrect key lengths (Libraries, 8138589) (CVE-2016-0475)

  - OpenJDK: incorrect boundary check in JPEG decoder (AWT, 8139017) (CVE-2016-0483)

  - ICU: integer signedness issue in IndicRearrangementProcessor (OpenJDK 2D, 8140543) (CVE-2016-0494)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:0049 advisory.

    The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime     Environment and the OpenJDK 8 Java Software Development Kit.

    An out-of-bounds write flaw was found in the JPEG image format decoder in     the AWT component in OpenJDK. A specially crafted JPEG image could cause     a Java application to crash or, possibly execute arbitrary code. An     untrusted Java application or applet could use this flaw to bypass Java     sandbox restrictions. (CVE-2016-0483)

    An integer signedness issue was found in the font parsing code in the 2D     component in OpenJDK. A specially crafted font file could possibly cause     the Java Virtual Machine to execute arbitrary code, allowing an untrusted     Java application or applet to bypass Java sandbox restrictions.
    (CVE-2016-0494)

    It was discovered that the password-based encryption (PBE) implementation     in the Libraries component in OpenJDK used an incorrect key length. This     could, in certain cases, lead to generation of keys that were weaker than     expected. (CVE-2016-0475)

    It was discovered that the JAXP component in OpenJDK did not properly     enforce the totalEntitySizeLimit limit. An attacker able to make a Java     application process a specially crafted XML file could use this flaw to     make the application consume an excessive amount of memory. (CVE-2016-0466)

    A flaw was found in the way TLS 1.2 could use the MD5 hash function for     signing ServerKeyExchange and Client Authentication packets during a TLS     handshake. A man-in-the-middle attacker able to force a TLS connection to     use the MD5 hash function could use this flaw to conduct collision attacks     to impersonate a TLS server or an authenticated TLS client. (CVE-2015-7575)

    Multiple flaws were discovered in the Networking and JMX components in     OpenJDK. An untrusted Java application or applet could use these flaws to     bypass certain Java sandbox restrictions. (CVE-2016-0402, CVE-2016-0448)

    Note: If the web browser plug-in provided by the icedtea-web package was     installed, the issues exposed via Java applets could have been exploited     without user interaction if a user visited a malicious website.

    Note: This update also disallows the use of the MD5 hash algorithm in the     certification path processing. The use of MD5 can be re-enabled by removing     MD5 from the jdk.certpath.disabledAlgorithms security property defined in     the java.security file.

    All users of java-1.8.0-openjdk are advised to upgrade to these updated     packages, which resolve these issues. All running instances of OpenJDK Java     must be restarted for the update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-0049 advisory.

    [1:1.8.0.71-2.b15]
    - Add md5sum for previous java.security file so it gets updated.
    - Resolves: rhbz#1295753

    [1:1.8.0.71-1.b15]
    - Restore upstream version of system LCMS patch removed by 'sync with Fedora'
    - Add patch to turn off strict overflow on IndicRearrangementProcessor{,2}.cpp
    - Resolves: rhbz#1295753

    [1:1.8.0.71-0.b15]
    - January 2016 security update to u71b15.
    - Improve verbosity and helpfulness of tarball generation script.
    - Remove RH1290936 workaround as RHEL does not have the hardened flags nor ARM32.
    - Update patch documentation using version originally written for Fedora.
    - Drop prelink requirement as we no longer use execstack.
    - Drop ifdefbugfix patch as this is fixed upstream.
    - Provide optional boostrap build and turn it off by default.
    - Turn off additional CFLAGS/LDFLAGS on AArch64 as bootstrapping failed.
    - Add patch for size_t formatting on s390 as size_t != intptr_t there.
    - Resolves: rhbz#1295753

    [1:1.8.0.65-4.b17]
    - moved to integration forest
    - sync with fedora (all but extracted luas and family)
    - Resolves: rhbz#1295753

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
160338	IBM Java 6.0 < 6.0.16.20 / 6.1 < 6.1.8.20 / 7.0 < 7.0.9.30 / 7.1 < 7.1.3.30 / 8.0 < 8.0.2.10 Multiple Vulnerabilities (Jan 19, 2016)	Nessus	Misc.	high
700654	Oracle Java SE 6 < Update 111 / 7 < Update 95 / 8 < Update 71 Multiple Vulnerabilities (January 2016 CPU) (SLOTH)	Nessus Network Monitor	Web Clients	critical
94085	GLSA-201610-08 : Oracle JRE/JDK: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
89053	AIX Java Advisory : java_jan2016_advisory.asc (January 2016 CPU) (SLOTH)	Nessus	AIX Local Security Checks	critical
88692	SUSE SLES12 Security Update : java-1_8_0-ibm (SUSE-SU-2016:0390-1) (SLOTH)	Nessus	SuSE Local Security Checks	critical
88659	Amazon Linux AMI : java-1.8.0-openjdk (ALAS-2016-647) (SLOTH)	Nessus	Amazon Linux Local Security Checks	medium
88554	RHEL 7 : java-1.8.0-ibm (RHSA-2016:0098)	Nessus	Red Hat Local Security Checks	critical
88453	SUSE SLED12 / SLES12 Security Update : java-1_8_0-openjdk (SUSE-SU-2016:0256-1) (SLOTH)	Nessus	SuSE Local Security Checks	high
88078	Scientific Linux Security Update : java-1.8.0-openjdk on SL7.x x86_64 (20160120) (SLOTH)	Nessus	Scientific Linux Local Security Checks	medium
88074	RHEL 6 / 7 : java-1.8.0-oracle (RHSA-2016:0055) (SLOTH)	Nessus	Red Hat Local Security Checks	high
88069	Oracle Linux 6 : java-1.8.0-openjdk (ELSA-2016-0050)	Nessus	Oracle Linux Local Security Checks	medium
88061	CentOS 6 : java-1.8.0-openjdk (CESA-2016:0050) (SLOTH)	Nessus	CentOS Local Security Checks	medium
88060	CentOS 7 : java-1.8.0-openjdk (CESA-2016:0049) (SLOTH)	Nessus	CentOS Local Security Checks	medium
88046	Oracle Java SE Multiple Vulnerabilities (January 2016 CPU) (SLOTH) (Unix)	Nessus	Misc.	critical
88045	Oracle Java SE Multiple Vulnerabilities (January 2016 CPU) (SLOTH)	Nessus	Windows	critical
88041	Oracle JRockit R28 < R28.3.9 Multiple Vulnerabilities (January 2016 CPU) (SLOTH)	Nessus	Windows	critical
88037	Scientific Linux Security Update : java-1.8.0-openjdk on SL6.x i386/x86_64 (20160120) (SLOTH)	Nessus	Scientific Linux Local Security Checks	medium
88036	RHEL 6 : java-1.8.0-openjdk (RHSA-2016:0050)	Nessus	Red Hat Local Security Checks	medium
88035	RHEL 7 : java-1.8.0-openjdk (RHSA-2016:0049)	Nessus	Red Hat Local Security Checks	medium
88031	Oracle Linux 7 : java-1.8.0-openjdk (ELSA-2016-0049)	Nessus	Oracle Linux Local Security Checks	medium

Detections

Analytics

CVE-2016-0475

medium

Tenable Plugins

high

critical

critical

critical

critical

medium

critical

high

medium

high

medium

medium

medium

critical

critical

critical

medium

medium

medium

medium