CVE-2016-0264

Published: May 24, 2016Modified: May 6, 2026

5.6

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Exploitability: 2.2 / Impact: 3.4

Source: NVD

Description

Buffer overflow in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40 (7.1.3.40), and 8 before SR3 (8.0.3.0) allows remote attackers to execute arbitrary code via unspecified vectors.

Affected (35)

Products: Ibm: Java Sdk · Redhat: Enterprise Linux Desktop, Enterprise Linux Hpc Node Supplementary, Enterprise Linux Server, Enterprise Linux Server Eus, Enterprise Linux Workstation, Satellite · Suse: Linux Enterprise Server, Linux Enterprise Software Development Kit, Suse Linux Enterprise Server, Manager, Manager Proxy, Openstack Cloud

Ibm

1 product

Java Sdk

Redhat

6 products

Enterprise Linux Desktop

Enterprise Linux Hpc Node Supplementary

Enterprise Linux Server

Enterprise Linux Server Eus

Enterprise Linux Workstation

Satellite

Suse

6 products

Linux Enterprise Server

Linux Enterprise Software Development Kit

Suse Linux Enterprise Server

Manager

Manager Proxy

Openstack Cloud

Configuration B

5 vulnerable

Vulnerable Software	Affected Versions
Ibm Java Sdk	From 6.0.0.0 to 6.0.16.25
Ibm Java Sdk	From 6.1.0.0 to 6.1.8.25
Ibm Java Sdk	From 7.0.0.0 to 7.0.9.40
Ibm Java Sdk	From 7.1.0.0 to 7.1.3.40
Ibm Java Sdk	From 8.0.0.0 to 8.0.3.0

Configuration C

18 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 5.0
Redhat Enterprise Linux Desktop	Version 6.0
Redhat Enterprise Linux Desktop	Version 7.0
Redhat Enterprise Linux Hpc Node Supplementary	Version 6.0
Redhat Enterprise Linux Hpc Node Supplementary	Version 7.0
Redhat Enterprise Linux Server	Version 5.0
Redhat Enterprise Linux Server	Version 6.0
Redhat Enterprise Linux Server	Version 7.0
Redhat Enterprise Linux Server Eus	Version 6.7
Redhat Enterprise Linux Server Eus	Version 7.2
Redhat Enterprise Linux Server Eus	Version 7.3
Redhat Enterprise Linux Server Eus	Version 7.4
Redhat Enterprise Linux Server Eus	Version 7.5
Redhat Enterprise Linux Workstation	Version 5.0
Redhat Enterprise Linux Workstation	Version 6.0
Redhat Enterprise Linux Workstation	Version 7.0
Redhat Satellite	Version 5.6
Redhat Satellite	Version 5.7

Configuration D

9 vulnerable

Vulnerable Software	Affected Versions
Suse Linux Enterprise Server	Version 10 sp4
Suse Linux Enterprise Server	Version 11 sp2
Suse Linux Enterprise Server	Version 11 sp3
Suse Linux Enterprise Server	Version 11 sp4
Suse Linux Enterprise Server	Version 12 sp1
Suse Linux Enterprise Software Development Kit	Version 11 sp4
Suse Linux Enterprise Software Development Kit	Version 12
Suse Linux Enterprise Software Development Kit	Version 12 sp1
Suse Suse Linux Enterprise Server	Version 12

Configuration E

3 vulnerable

Vulnerable Software	Affected Versions
Suse Manager	Version 2.1
Suse Manager Proxy	Version 2.1
Suse Openstack Cloud	Version 5

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (36)

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00039.html

Source: psirt@us.ibm.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00040.html

Source: psirt@us.ibm.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00042.html

Source: psirt@us.ibm.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00058.html

Source: psirt@us.ibm.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00059.html

Source: psirt@us.ibm.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00061.html

Source: psirt@us.ibm.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00067.html

Source: psirt@us.ibm.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00002.html

Source: psirt@us.ibm.com

Mailing ListThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-0701.html

Source: psirt@us.ibm.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-0702.html

Source: psirt@us.ibm.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-0708.html

Source: psirt@us.ibm.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-0716.html

Source: psirt@us.ibm.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-1039.html

Source: psirt@us.ibm.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg1IV84035

Source: psirt@us.ibm.com

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21980826

Source: psirt@us.ibm.com

Vendor Advisory

http://www.securitytracker.com/id/1035953

Source: psirt@us.ibm.com

Third Party AdvisoryVDB Entry

https://access.redhat.com/errata/RHSA-2016:1430

Source: psirt@us.ibm.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:1216

Source: psirt@us.ibm.com

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00039.html