CVE-2016-5556

Unspecified vulnerability in Oracle Java SE 6u121, 7u111, and 8u102 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D.

CVSS v3.0 9.6 CRITICAL
CVSS v2.0 9.3 HIGH

9.6^/10

CVSS v3.0 : CRITICAL

Vector : AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Exploitability : 2.8 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

9.3^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 8.6 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html	Patch Vendor Advisory
http://www.securityfocus.com/bid/93618
http://rhn.redhat.com/errata/RHSA-2016-2659.html
https://security.gentoo.org/glsa/201611-04
http://www.securitytracker.com/id/1037040
https://security.netapp.com/advisory/ntap-20161019-0001/
https://access.redhat.com/errata/RHSA-2017:1216
http://rhn.redhat.com/errata/RHSA-2016-2138.html
http://rhn.redhat.com/errata/RHSA-2016-2137.html
http://rhn.redhat.com/errata/RHSA-2016-2136.html
http://rhn.redhat.com/errata/RHSA-2016-2090.html
http://rhn.redhat.com/errata/RHSA-2016-2089.html
http://rhn.redhat.com/errata/RHSA-2016-2088.html
https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0@%3Cissues.bookkeeper.apache.org%3E

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:oracle:jdk:1.8.0:update102::::::
	cpe:2.3:a:oracle:jdk:1.7.0:update111::::::
	cpe:2.3:a:oracle:jdk:1.6.0:update121::::::
	cpe:2.3:a:oracle:jre:1.6.0:update121::::::
	cpe:2.3:a:oracle:jre:1.7.0:update111::::::
	cpe:2.3:a:oracle:jre:1.8.0:update102::::::

Information

Published : 2016-10-25 07:30

Updated : 2022-05-13 07:57

NVD link : CVE-2016-5556

Mitre link : CVE-2016-5556

JSON object : View

CWE

CWE-284

Improper Access Control

Advertisement

Products Affected

oracle

jdk
jre

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html", "name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html", "tags": ["Patch", "Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://www.securityfocus.com/bid/93618", "name": "93618", "tags": [], "refsource": "BID"}, {"url": "http://rhn.redhat.com/errata/RHSA-2016-2659.html", "name": "RHSA-2016:2659", "tags": [], "refsource": "REDHAT"}, {"url": "https://security.gentoo.org/glsa/201611-04", "name": "GLSA-201611-04", "tags": [], "refsource": "GENTOO"}, {"url": "http://www.securitytracker.com/id/1037040", "name": "1037040", "tags": [], "refsource": "SECTRACK"}, {"url": "https://security.netapp.com/advisory/ntap-20161019-0001/", "name": "https://security.netapp.com/advisory/ntap-20161019-0001/", "tags": [], "refsource": "CONFIRM"}, {"url": "https://access.redhat.com/errata/RHSA-2017:1216", "name": "RHSA-2017:1216", "tags": [], "refsource": "REDHAT"}, {"url": "http://rhn.redhat.com/errata/RHSA-2016-2138.html", "name": "RHSA-2016:2138", "tags": [], "refsource": "REDHAT"}, {"url": "http://rhn.redhat.com/errata/RHSA-2016-2137.html", "name": "RHSA-2016:2137", "tags": [], "refsource": "REDHAT"}, {"url": "http://rhn.redhat.com/errata/RHSA-2016-2136.html", "name": "RHSA-2016:2136", "tags": [], "refsource": "REDHAT"}, {"url": "http://rhn.redhat.com/errata/RHSA-2016-2090.html", "name": "RHSA-2016:2090", "tags": [], "refsource": "REDHAT"}, {"url": "http://rhn.redhat.com/errata/RHSA-2016-2089.html", "name": "RHSA-2016:2089", "tags": [], "refsource": "REDHAT"}, {"url": "http://rhn.redhat.com/errata/RHSA-2016-2088.html", "name": "RHSA-2016:2088", "tags": [], "refsource": "REDHAT"}, {"url": "https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0@%3Cissues.bookkeeper.apache.org%3E", "name": "[bookkeeper-issues] 20200729 [GitHub] [bookkeeper] padma81 opened a new issue #2387: Security vulnerabilities in the apache/bookkeeper-4.9.2 image", "tags": [], "refsource": "MLIST"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Unspecified vulnerability in Oracle Java SE 6u121, 7u111, and 8u102 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-284"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2016-5556", "ASSIGNER": "secalert_us@oracle.com"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 9.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "severity": "HIGH", "impactScore": 10.0, "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}, "baseMetricV3": {"cvssV3": {"scope": "CHANGED", "version": "3.0", "baseScore": 9.6, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.8}}, "publishedDate": "2016-10-25T14:30Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:oracle:jdk:1.8.0:update102:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:oracle:jdk:1.7.0:update111:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:oracle:jdk:1.6.0:update121:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:oracle:jre:1.6.0:update121:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:oracle:jre:1.7.0:update111:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:oracle:jre:1.8.0:update102:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2022-05-13T14:57Z"}