远程 Redhat Enterprise Linux 6 主机上安装的程序包受到 RHSA-2016:1430 公告中提及的多个漏洞的影响。

    IBM Java SE 版本 7 包括 IBM Java Runtime Environment 和 IBM Java 软件开发工具包。

    此更新将 IBM Java SE 7 升级到版本 7 SR9-FP40 和 7R1 SR3-FP40。

    安全修复：

    * 此更新修复了 IBM Java Runtime Environment 和 IBM Java 软件开发工具包中的多个漏洞。有关这些缺陷的更多信息，请参阅 IBM Java“安全警报”页面的“参考”部分。（CVE-2015-4734、CVE-2015-4803、CVE-2015-4805、CVE-2015-4806、CVE-2015-4810、CVE-2015-4835、CVE-2015-4840、CVE-2015-4842、CVE-2015-4843、CVE-2015-4844、CVE-2015-4860、CVE-2015-4871、CVE-2015-4872、CVE-2015-4882、CVE-2015-4883、CVE-2015-4893、CVE-2015-4902、CVE-2015-4903、CVE-2015-5006、CVE-2015-5041、CVE-2015-7575、CVE-2015-7981、CVE-2015-8126、CVE-2015-8472、CVE-2015-8540、CVE-2016-0264、CVE-2016-0363、CVE-2016-0376、CVE-2016-0402、CVE-2016-0448、CVE-2016-0466、CVE-2016-0483、CVE-2016-0494、CVE-2016-0686、CVE-2016-0687、CVE-2016-3422、CVE-2016-3426、CVE-2016-3427、CVE-2016-3443、CVE-2016-3449）

    Red Hat 在此感谢 Truel IT 的 Andrea Palazzo 报告 CVE-2015-4806 问题。

Tenable 已直接从 Red Hat Enterprise Linux 安全公告中提取上述描述块。

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

The version of Oracle (formerly Sun) Java SE or Java for Business installed on the remote host is prior to 8 Update 91, 7 Update 101, or 6 Update 115. It is, therefore, affected by security vulnerabilities in the following subcomponents :

 - 2D
 - Deployment
 - Hotspot
 - JAXP
 - JCE
 - JMX
 - Security
 - Serialization

The version of Oracle Java SE installed on the remote host is prior to 6 Update 115, 7 Update 101, or 8 Update 92 and is affected by multiple vulnerabilities :

 - An unspecified flaw related to the 'Serialization' subcomponent may allow a context-dependent attacker to execute arbitrary code. (CVE-2016-0686)
 - An unspecified flaw related to the 'Hotspot' subcomponent may allow a context-dependent attacker to execute arbitrary code. (CVE-2016-0687)
 - An unspecified flaw related to the 'Security' subcomponent may allow a remote attacker to gain access to potentially sensitive information. (CVE-2016-0695)
 - An unspecified flaw related to the '2D' subcomponent may allow a context-dependent attacker to cause a denial of service. (CVE-2016-3422)
 - An unspecified flaw related to the 'JAXP' subcomponent may allow a remote attacker to cause a denial of service. (CVE-2016-3425)
 - An unspecified flaw related to the 'JCE' subcomponent may allow a context-dependent attacker to gain access to potentially sensitive information. (CVE-2016-3426)
 - A flaw related to the 'JMX' subcomponent may allow a remote attacker to execute arbitrary code through Java deserialization. (CVE-2016-3427)
 - An out-of-bounds read flaw within the '2D' subcomponent is triggered when handling specially crafted files. This may allow a context-dependent attacker gain unauthorized access to potentially sensitive information. (CVE-2016-3443)
 - An unspecified flaw related to the 'Deployment' subcomponent may allow a context-dependent attacker to execute arbitrary code. (CVE-2016-3449)

ID	名前	製品	ファミリー	公開日	更新日	深刻度
92400	RHEL 6：java-1.7.0-ibm 和 java-1.7.1-ibm (RHSA-2016:1430)	Nessus	Red Hat Local Security Checks	2016/7/19	2025/4/15	critical
700653	Oracle Java SE 6 < Update 115 / 7 < Update 101 / 8 < Update 91 Multiple Vulnerabilities (April 2016 CPU)	Nessus Network Monitor	Web Clients	2019/5/2	2019/5/2	high
9448	Oracle Java SE 6 < Update 115 / 7 < Update 101 / 8 < Update 92 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2016/8/8	2019/3/6	critical

検出

プラグインの検索

critical

high

critical