Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in breakouts of the Java sandbox, information disclosure, denial of service and insecure cryptography.

CVE-2015-7575   A flaw was found in the way TLS 1.2 could use the MD5 hash function for signing ServerKeyExchange and Client Authentication packets during a TLS handshake.

CVE-2015-8126   Multiple buffer overflows in the (1) png_set_PLTE and (2)   png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x   before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before   1.5.24, and 1.6.x before 1.6.19 allow remote attackers to cause   a denial of service (application crash) or possibly have   unspecified other impact via a small bit-depth value in an IHDR   (aka image header) chunk in a PNG image.

CVE-2015-8472   Buffer overflow in the png_set_PLTE function in libpng before   1.0.65, 1.1.x and 1.2.x before 1.2.55, 1.3.x, 1.4.x before   1.4.18, 1.5.x before 1.5.25, and 1.6.x before 1.6.20 allows   remote attackers to cause a denial of service (application   crash) or possibly have unspecified other impact via a small   bit-depth value in an IHDR (aka image header) chunk in a PNG   image. NOTE: this vulnerability exists because of an incomplete   fix for CVE-2015-8126.

CVE-2016-0402   Unspecified vulnerability in the Java SE and Java SE Embedded   components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE   Embedded 8u65 allows remote attackers to affect integrity via   unknown vectors related to Networking.

CVE-2016-0448   Unspecified vulnerability in the Java SE and Java SE Embedded   components in Oracle Java SE 6u105, 7u91, and 8u66, and Java SE   Embedded 8u65 allows remote authenticated users to affect   confidentiality via vectors related to JMX.

CVE-2016-0466   It was discovered that the JAXP component in OpenJDK did not properly enforce the totalEntitySizeLimit limit. An attacker able to make a Java application process a specially crafted XML file could use this flaw to make the application consume an excessive amount of memory.

CVE-2016-0483   Unspecified vulnerability in the Java SE, Java SE Embedded, and   JRockit components in Oracle Java SE 6u105, 7u91, and 8u66;   Java SE Embedded 8u65; and JRockit R28.3.8 allows remote   attackers to affect confidentiality, integrity, and   availability via vectors related to AWT.

CVE-2016-0494   Unspecified vulnerability in the Java SE and Java SE Embedded   components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE   Embedded 8u65 allows remote attackers to affect     confidentiality, integrity, and availability via   unknown vectors related to 2D.

For Debian 6 'Squeeze', these problems have been fixed in version 6b38-1.13.10-1~deb6u1.

We recommend that you upgrade your openjdk-6 packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

IBM Java was updated to version 6.0-16.20, fixing various security issues.

More information can be found on <a href='http://www.ibm.com/developerworks/java/jdk/alerts/'>http://www.i bm.com/developerworks/java/jdk/alerts/</a>.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-0049 advisory.

    [1:1.8.0.71-2.b15]
    - Add md5sum for previous java.security file so it gets updated.
    - Resolves: rhbz#1295753

    [1:1.8.0.71-1.b15]
    - Restore upstream version of system LCMS patch removed by 'sync with Fedora'
    - Add patch to turn off strict overflow on IndicRearrangementProcessor{,2}.cpp
    - Resolves: rhbz#1295753

    [1:1.8.0.71-0.b15]
    - January 2016 security update to u71b15.
    - Improve verbosity and helpfulness of tarball generation script.
    - Remove RH1290936 workaround as RHEL does not have the hardened flags nor ARM32.
    - Update patch documentation using version originally written for Fedora.
    - Drop prelink requirement as we no longer use execstack.
    - Drop ifdefbugfix patch as this is fixed upstream.
    - Provide optional boostrap build and turn it off by default.
    - Turn off additional CFLAGS/LDFLAGS on AArch64 as bootstrapping failed.
    - Add patch for size_t formatting on s390 as size_t != intptr_t there.
    - Resolves: rhbz#1295753

    [1:1.8.0.65-4.b17]
    - moved to integration forest
    - sync with fedora (all but extracted luas and family)
    - Resolves: rhbz#1295753

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Oracle (formerly Sun) Java SE or Java for Business installed on the remote host is prior to 8 Update 71, 7 Update 95, or 6 Update 111. It is, therefore, affected by security vulnerabilities in the following components :

  - 2D
  - AWT
  - JAXP
  - JMX
  - Libraries
  - Networking
  - Security

Updated java-1.8.0-openjdk packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

An out-of-bounds write flaw was found in the JPEG image format decoder in the AWT component in OpenJDK. A specially crafted JPEG image could cause a Java application to crash or, possibly execute arbitrary code.
An untrusted Java application or applet could use this flaw to bypass Java sandbox restrictions. (CVE-2016-0483)

An integer signedness issue was found in the font parsing code in the 2D component in OpenJDK. A specially crafted font file could possibly cause the Java Virtual Machine to execute arbitrary code, allowing an untrusted Java application or applet to bypass Java sandbox restrictions. (CVE-2016-0494)

It was discovered that the password-based encryption (PBE) implementation in the Libraries component in OpenJDK used an incorrect key length. This could, in certain cases, lead to generation of keys that were weaker than expected. (CVE-2016-0475)

It was discovered that the JAXP component in OpenJDK did not properly enforce the totalEntitySizeLimit limit. An attacker able to make a Java application process a specially crafted XML file could use this flaw to make the application consume an excessive amount of memory.
(CVE-2016-0466)

A flaw was found in the way TLS 1.2 could use the MD5 hash function for signing ServerKeyExchange and Client Authentication packets during a TLS handshake. A man-in-the-middle attacker able to force a TLS connection to use the MD5 hash function could use this flaw to conduct collision attacks to impersonate a TLS server or an authenticated TLS client. (CVE-2015-7575)

Multiple flaws were discovered in the Networking and JMX components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass certain Java sandbox restrictions. (CVE-2016-0402, CVE-2016-0448)

Note: This update also disallows the use of the MD5 hash algorithm in the certification path processing. The use of MD5 can be re-enabled by removing MD5 from the jdk.certpath.disabledAlgorithms security property defined in the java.security file.

All users of java-1.8.0-openjdk are advised to upgrade to these updated packages, which resolve these issues. All running instances of OpenJDK Java must be restarted for the update to take effect.

Updated java-1.7.0-openjdk packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Kit.

An out-of-bounds write flaw was found in the JPEG image format decoder in the AWT component in OpenJDK. A specially crafted JPEG image could cause a Java application to crash or, possibly execute arbitrary code.
An untrusted Java application or applet could use this flaw to bypass Java sandbox restrictions. (CVE-2016-0483)

An integer signedness issue was found in the font parsing code in the 2D component in OpenJDK. A specially crafted font file could possibly cause the Java Virtual Machine to execute arbitrary code, allowing an untrusted Java application or applet to bypass Java sandbox restrictions. (CVE-2016-0494)

It was discovered that the JAXP component in OpenJDK did not properly enforce the totalEntitySizeLimit limit. An attacker able to make a Java application process a specially crafted XML file could use this flaw to make the application consume an excessive amount of memory.
(CVE-2016-0466)

A flaw was found in the way TLS 1.2 could use the MD5 hash function for signing ServerKeyExchange and Client Authentication packets during a TLS handshake. A man-in-the-middle attacker able to force a TLS connection to use the MD5 hash function could use this flaw to conduct collision attacks to impersonate a TLS server or an authenticated TLS client. (CVE-2015-7575)

Multiple flaws were discovered in the Libraries, Networking, and JMX components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass certain Java sandbox restrictions.
(CVE-2015-4871, CVE-2016-0402, CVE-2016-0448)

Note: If the web browser plug-in provided by the icedtea-web package was installed, the issues exposed via Java applets could have been exploited without user interaction if a user visited a malicious website.

Note: This update also disallows the use of the MD5 hash algorithm in the certification path processing. The use of MD5 can be re-enabled by removing MD5 from the jdk.certpath.disabledAlgorithms security property defined in the java.security file.

All users of java-1.7.0-openjdk are advised to upgrade to these updated packages, which resolve these issues. All running instances of OpenJDK Java must be restarted for the update to take effect.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:0055 advisory.

    Oracle Java SE version 8 includes the Oracle Java Runtime Environment and     the Oracle Java Software Development Kit.

    This update fixes several vulnerabilities in the Oracle Java Runtime     Environment and the Oracle Java Software Development Kit. Further     information about these flaws can be found on the Oracle Java SE Critical     Patch Update Advisory page, listed in the References section.
    (CVE-2015-7575, CVE-2015-8126, CVE-2015-8472, CVE-2016-0402, CVE-2016-0448,     CVE-2016-0466, CVE-2016-0475, CVE-2016-0483, CVE-2016-0494)

    Note: This update also disallows the use of the MD5 hash algorithm in the     certification path processing. The use of MD5 can be re-enabled by removing     MD5 from the jdk.certpath.disabledAlgorithms security property defined in     the java.security file.

    All users of java-1.8.0-oracle are advised to upgrade to these updated     packages, which provide Oracle Java 8 Update 71 and resolve these issues.
    All running instances of Oracle Java must be restarted for the update to     take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Java SDK installed on the remote AIX host is affected by multiple vulnerabilities in the following components :

  - 2D
  - AWT
  - IBM J9 JVM
  - JAXP
  - JMX
  - Libraries
  - Networking
  - Security

An out-of-bounds write flaw was found in the JPEG image format decoder in the AWT component in OpenJDK. A specially crafted JPEG image could cause a Java application to crash or, possibly execute arbitrary code.
An untrusted Java application or applet could use this flaw to bypass Java sandbox restrictions. (CVE-2016-0483)

An integer signedness issue was found in the font parsing code in the 2D component in OpenJDK. A specially crafted font file could possibly cause the Java Virtual Machine to execute arbitrary code, allowing an untrusted Java application or applet to bypass Java sandbox restrictions. (CVE-2016-0494)

It was discovered that the JAXP component in OpenJDK did not properly enforce the totalEntitySizeLimit limit. An attacker able to make a Java application process a specially crafted XML file could use this flaw to make the application consume an excessive amount of memory.
(CVE-2016-0466)

Multiple flaws were discovered in the Networking and JMX components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass certain Java sandbox restrictions. (CVE-2016-0402 , CVE-2016-0448)

ID	名前	製品	ファミリー	公開日	更新日	深刻度
88580	Debian DLA-410-1 : openjdk-6 security update (SLOTH)	Nessus	Debian Local Security Checks	2016/2/5	2021/1/11	high
89989	SUSE SLES10 Security Update : java-1_6_0-ibm (SUSE-SU-2016:0776-1) (SLOTH)	Nessus	SuSE Local Security Checks	2016/3/17	2021/1/6	critical
88031	Oracle Linux 7 : java-1.8.0-openjdk (ELSA-2016-0049)	Nessus	Oracle Linux Local Security Checks	2016/1/21	2025/2/18	high
88046	Oracle Java SE Multiple Vulnerabilities (January 2016 CPU) (SLOTH) (Unix)	Nessus	Misc.	2016/1/21	2024/6/20	critical
88061	CentOS 6 : java-1.8.0-openjdk (CESA-2016:0050) (SLOTH)	Nessus	CentOS Local Security Checks	2016/1/22	2021/1/4	medium
88072	RHEL 6 : java-1.7.0-openjdk (RHSA-2016:0053) (SLOTH)	Nessus	Red Hat Local Security Checks	2016/1/22	2019/10/24	medium
88074	RHEL 7 : java-1.8.0-oracle (RHSA-2016:0055)	Nessus	Red Hat Local Security Checks	2016/1/22	2025/4/15	high
89053	AIX Java Advisory : java_jan2016_advisory.asc (January 2016 CPU) (SLOTH)	Nessus	AIX Local Security Checks	2016/3/1	2023/4/21	critical
89119	Amazon Linux AMI : java-1.6.0-openjdk (ALAS-2016-654)	Nessus	Amazon Linux Local Security Checks	2016/3/4	2018/4/18	critical

検出

プラグインの検索

high

critical

high

critical

medium

medium

high

critical

critical