2.6.7 的更新 - OpenJDK 7u111

- 安全性修正：

- S8079718、CVE-2016-3458：IIOP 輸入資料流勾點 (bsc#989732)

- S8145446、CVE-2016-3485：完美的管道放置 (僅限 Windows) (bsc#989734)

- S8147771：Javax 自訂原則下靜態保護網域的建構

- S8148872、CVE-2016-3500：完整名稱檢查 (bsc#989730)

- S8149962、CVE-2016-3508：XML 處理的較佳描述 (bsc#989731)

- S8150752：共用類別資料

- S8151925：字型參照改善

- S8152479、CVE-2016-3550：編碼位元組資料流 (bsc#989733)

- S8155981、CVE-2016-3606：增強位元組程式碼驗證 (bsc#989722)

- S8155985、CVE-2016-3598：持續參數處理 (bsc#989723)

- S8158571、CVE-2016-3610：其他方法處理驗證 (bsc#989725)

- CVE-2016-3511 (bsc#989727)

- CVE-2016-3503 (bsc#989728)

- CVE-2016-3498 (bsc#989729)

遠端主機受到 GLSA-201610-08 中所述的弱點影響 (Oracle JRE/JDK：多個弱點)

    Oracle 的 JRE 和 JDK 中存在多個弱點。如需其他資訊，請檢閱提及的 CVE。
  影響：

    遠端攻擊者可取得資訊的存取權、從遠端執行任意程式碼，或造成拒絕服務。
  因應措施：

    目前尚無已知的因應措施。

The version of Oracle Java SE installed on the remote host is prior to 6 Update 121, 7 Update 111, or 8 Update 102 and is affected by multiple vulnerabilities :

 - An unspecified flaw exists in the 'CORBA' subcomponent that allows an unauthenticated, remote attacker to impact integrity. (CVE-2016-3458)
 - An unspecified flaw exists in the 'Networking' subcomponent that allows a local attacker to impact integrity. (CVE-2016-3485)
 - An unspecified flaw exists in the 'JavaFX' subcomponent that allows an unauthenticated, remote attacker to cause a denial of service condition. (CVE-2016-3498)
 - An unspecified flaw exists in the 'JAXP' subcomponent that allows an unauthenticated, remote attacker to cause a denial of service condition. (CVE-2016-3500, CVE-2016-3508)
 - An unspecified flaw exists in the 'Install' subcomponent that allows a local attacker to gain elevated privileges. (CVE-2016-3503, CVE-2016-3552)
 - An unspecified flaw exists in the 'Deployment' subcomponent that allows a local attacker to gain elevated privileges. (CVE-2016-3511)
 - An unspecified flaw exists in the 'Hotspot' subcomponent that allows an unauthenticated, remote attacker to disclose potentially sensitive information. (CVE-2016-3550)
 - A flaw exists in the 'Hotspot' subcomponent due to improper access to the 'MethodHandle::invokeBasic()' function. An unauthenticated, remote attacker can exploit this to execute arbitrary code. (CVE-2016-3587)
 - A flaw exists in the 'Libraries' subcomponent within the 'MethodHandles::dropArguments()' function that allows an unauthenticated, remote attacker to execute arbitrary code. (CVE-2016-3598)
 - A flaw exists in the 'Hotspot' subcomponent within the 'ClassVerifier::ends_in_athrow()' function when handling bytecode verification. An unauthenticated, remote attacker can exploit this to execute arbitrary code. (CVE-2016-3606)
 - An unspecified flaw exists in the 'Libraries' subcomponent that allows an unauthenticated, remote attacker to execute arbitrary code. (CVE-2016-3610)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
92992	openSUSE 安全性更新：OpenJDK7 (openSUSE-2016-982)	Nessus	SuSE Local Security Checks	2016/8/17	2021/1/19	critical
94085	GLSA-201610-08：Oracle JRE/JDK：多個弱點	Nessus	Gentoo Local Security Checks	2016/10/17	2021/1/11	critical
9449	Oracle Java SE 6 < Update 121 / 7 < Update 111 / 8 < Update 102 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2016/8/9	2019/3/6	high

检测

插件搜索

critical

critical

high