CVE-2016-3422: Medium severity oracle java se 7 vulnerability

Published Apr 19, 2016
·
Updated

Oracle Java SE 6u115, 7u101 and 8u91 fixes an unspecified vulnerability in the 2D component (CVE-2016-3422). Upstream has CVSSv2 scored this issue as: 5.0/AV:N/AC:L/Au:N/C:N/I:N/A:P

External Reference:

http://www.oracle.com/technetwork/topics/security/cpuapr2016-2881694.html#AppendixJAVA

Other sources

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect availability via vectors related to 2D.

Affected Software

24 affected componentsFixes available
redhat/java<1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11
1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11
redhat/java<1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11
1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11
redhat/java<1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7
1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7
redhat/java<1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7
1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7
redhat/java<1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7
1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7
redhat/java<1.8.0-oracle-1:1.8.0.91-1jpp.1.el7
1.8.0-oracle-1:1.8.0.91-1jpp.1.el7
redhat/java<1.7.0-oracle-1:1.7.0.101-1jpp.1.el7
1.7.0-oracle-1:1.7.0.101-1jpp.1.el7
redhat/java<1.6.0-sun-1:1.6.0.115-1jpp.1.el7
1.6.0-sun-1:1.6.0.115-1jpp.1.el7
redhat/java<1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5
1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5
redhat/java<1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el5
1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el5
redhat/java<1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7
1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7
redhat/java<1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7
1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7
redhat/java<1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6
1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6
redhat/java<1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7
1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7
redhat/java<1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7
1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7
redhat/spacewalk-java<0:2.0.2-109.el6
0:2.0.2-109.el6
redhat/java<1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8
1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8
redhat/spacewalk-java<0:2.3.8-146.el6
0:2.3.8-146.el6
Oracle JDK=1.6.0-update113
Oracle JDK=1.7.0-update99
Oracle JDK=1.8.0-update77
ORACLE JRE=1.6.0-update113
ORACLE JRE=1.7.0-update99
ORACLE JRE=1.8.0-update77

Event History

Apr 19, 2016
CVE Published
12:00 AM
Data Sourced
via Red Hat·09:16 PM
DescriptionSeverityAffected Software
Apr 21, 2016
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description

Frequently Asked Questions

1

What is the severity of CVE-2016-3422?

CVE-2016-3422 has a CVSSv2 score of 5.0, indicating medium severity.

2

How do I fix CVE-2016-3422?

To fix CVE-2016-3422, update your Java SE to the specified patched versions listed in the advisory.

3

What software is affected by CVE-2016-3422?

CVE-2016-3422 affects Oracle Java SE versions 6u115, 7u101, and 8u91.

4

Is my system at risk with CVE-2016-3422?

If you are using an affected version of Oracle Java SE, your system may be at risk due to CVE-2016-3422.

5

What components does CVE-2016-3422 affect?

CVE-2016-3422 affects the 2D component of Oracle Java.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203