CVE-2016-3511: High severity oracle java se 7 vulnerability

Q: What is the severity of CVE-2016-3511?

CVE-2016-3511 has been scored with a CVSS of 7.7, indicating a high severity level.

Q: Which versions of Oracle Java are affected by CVE-2016-3511?

CVE-2016-3511 affects Oracle Java SE 7u111 and 8u101 versions.

Q: How do I fix CVE-2016-3511?

To fix CVE-2016-3511, upgrade to the patched versions of Oracle Java, specifically 1.7.0_111 or 1.8.0_101 or later.

Q: What component is impacted by CVE-2016-3511?

CVE-2016-3511 impacts the Deployment component of Oracle Java.

Q: Is there a workaround for CVE-2016-3511?

There are no known workarounds for CVE-2016-3511; updating to the fixed versions is recommended.

Published Jul 19, 2016

Updated

Oracle Java SE 7u111 and 8u101 fixes an unspecified vulnerability in the Deployment component (CVE-2016-3511). Upstream has CVSS scored this issue as: 7.7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

External Reference:

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html#AppendixJAVA

Other sources

Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 allows local users to affect confidentiality, integrity, and availability via vectors related to Deployment.

Affected Software

15 affected componentsFixes available

redhat/java<1.7.0-oracle-1:1.7.0.111-1jpp.1.el5_11

1.7.0-oracle-1:1.7.0.111-1jpp.1.el5_11

redhat/java<1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8

1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8

redhat/java<1.7.0-oracle-1:1.7.0.111-1jpp.1.el6_8

1.7.0-oracle-1:1.7.0.111-1jpp.1.el6_8

redhat/java<1.8.0-oracle-1:1.8.0.101-1jpp.1.el7

1.8.0-oracle-1:1.8.0.101-1jpp.1.el7

redhat/java<1.7.0-oracle-1:1.7.0.111-1jpp.1.el7

1.7.0-oracle-1:1.7.0.111-1jpp.1.el7

redhat/java<1.7.0-ibm-1:1.7.0.9.50-1jpp.1.el5_11

1.7.0-ibm-1:1.7.0.9.50-1jpp.1.el5_11

redhat/java<1.8.0-ibm-1:1.8.0.3.10-1jpp.2.el6_8

1.8.0-ibm-1:1.8.0.3.10-1jpp.2.el6_8

redhat/java<1.7.1-ibm-1:1.7.1.3.50-1jpp.1.el6_8

1.7.1-ibm-1:1.7.1.3.50-1jpp.1.el6_8

redhat/java<1.8.0-ibm-1:1.8.0.3.10-1jpp.2.el7_2

1.8.0-ibm-1:1.8.0.3.10-1jpp.2.el7_2

redhat/java<1.7.1-ibm-1:1.7.1.3.50-1jpp.1.el7_2

1.7.1-ibm-1:1.7.1.3.50-1jpp.1.el7_2

redhat/java<1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8

1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8

Oracle JDK=1.7.0-update101

Oracle JDK=1.8.0-update92

ORACLE JRE=1.7.0-update101

ORACLE JRE=1.8.0-update92

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Event History

Jul 19, 2016

CVE Published

12:00 AM

Jul 20, 2016

Data Sourced

via Red Hat·08:36 AM

DescriptionSeverityAffected Software

Jul 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Parent advisories

This vulnerability appears in the following advisories.

Frequently Asked Questions

What is the severity of CVE-2016-3511?