CVE-2016-0264
published 2016-05-24CVE-2016-0264: Buffer overflow in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before…
PriorityP341medium5.6CVSS 3.1
AVNACHPRNUINSUCLILAL
EPSS
3.92%
89.3th percentile
Buffer overflow in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40 (7.1.3.40), and 8 before SR3 (8.0.3.0) allows remote attackers to execute arbitrary code via unspecified vectors.
Affected
32 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | java_sdk | >= 6.0.0.0 < 6.0.16.25 | 6.0.16.25 |
| ibm | java_sdk | >= 6.1.0.0 < 6.1.8.25 | 6.1.8.25 |
| ibm | java_sdk | >= 7.0.0.0 < 7.0.9.40 | 7.0.9.40 |
| ibm | java_sdk | >= 7.1.0.0 < 7.1.3.40 | 7.1.3.40 |
| ibm | java_sdk | >= 8.0.0.0 < 8.0.3.0 | 8.0.3.0 |
| redhat | enterprise_linux_desktop | — | — |
| redhat | enterprise_linux_desktop | — | — |
| redhat | enterprise_linux_desktop | — | — |
| redhat | enterprise_linux_hpc_node_supplementary | — | — |
| redhat | enterprise_linux_hpc_node_supplementary | — | — |
| redhat | enterprise_linux_server | — | — |
| redhat | enterprise_linux_server | — | — |
| redhat | enterprise_linux_server | — | — |
| redhat | enterprise_linux_server_eus | — | — |
| redhat | enterprise_linux_server_eus | — | — |
| redhat | enterprise_linux_server_eus | — | — |
| redhat | enterprise_linux_server_eus | — | — |
| redhat | enterprise_linux_server_eus | — | — |
| redhat | enterprise_linux_workstation | — | — |
| redhat | enterprise_linux_workstation | — | — |
| redhat | enterprise_linux_workstation | — | — |
| redhat | satellite | — | — |
| redhat | satellite | — | — |
| suse | linux_enterprise_server | — | — |
| suse | linux_enterprise_server | — | — |
CVSS provenance
nvdv3.15.6MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
vendor_redhat5.6MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-3p6j-59jx-xr88: Buffer overflow in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6
ghsa_unreviewed·2022-05-13
CVE-2016-0264 [MEDIUM] CWE-119 GHSA-3p6j-59jx-xr88: Buffer overflow in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6
Buffer overflow in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40 (7.1.3.40), and 8 before SR3 (8.0.3.0) allows remote attackers to execute arbitrary code via unspecified vectors.
Red Hat
JDK: buffer overflow vulnerability in the IBM JVM
vendor_redhat·2016-04-27·CVSS 5.6
CVE-2016-0264 [MEDIUM] CWE-120 JDK: buffer overflow vulnerability in the IBM JVM
JDK: buffer overflow vulnerability in the IBM JVM
Buffer overflow in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40 (7.1.3.40), and 8 before SR3 (8.0.3.0) allows remote attackers to execute arbitrary code via unspecified vectors.
No detection rules found.
No public exploits indexed.
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00039.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-05/msg00040.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-05/msg00042.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-05/msg00058.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-05/msg00059.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-05/msg00061.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-05/msg00067.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-06/msg00002.htmlhttp://rhn.redhat.com/errata/RHSA-2016-0701.htmlhttp://rhn.redhat.com/errata/RHSA-2016-0702.htmlhttp://rhn.redhat.com/errata/RHSA-2016-0708.htmlhttp://rhn.redhat.com/errata/RHSA-2016-0716.htmlhttp://rhn.redhat.com/errata/RHSA-2016-1039.htmlhttp://www-01.ibm.com/support/docview.wss?uid=swg1IV84035http://www-01.ibm.com/support/docview.wss?uid=swg21980826http://www.securitytracker.com/id/1035953https://access.redhat.com/errata/RHSA-2016:1430https://access.redhat.com/errata/RHSA-2017:1216http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00039.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-05/msg00040.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-05/msg00042.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-05/msg00058.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-05/msg00059.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-05/msg00061.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-05/msg00067.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-06/msg00002.htmlhttp://rhn.redhat.com/errata/RHSA-2016-0701.htmlhttp://rhn.redhat.com/errata/RHSA-2016-0702.htmlhttp://rhn.redhat.com/errata/RHSA-2016-0708.htmlhttp://rhn.redhat.com/errata/RHSA-2016-0716.htmlhttp://rhn.redhat.com/errata/RHSA-2016-1039.htmlhttp://www-01.ibm.com/support/docview.wss?uid=swg1IV84035http://www-01.ibm.com/support/docview.wss?uid=swg21980826http://www.securitytracker.com/id/1035953https://access.redhat.com/errata/RHSA-2016:1430https://access.redhat.com/errata/RHSA-2017:1216
2016-05-24
Published