CVE-2016-5542

2016-10-2500:00:00

ubuntu.com

3.1 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.007 Low

EPSS

Percentile

79.7%

JSON

Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java
SE Embedded 8u101 allows remote attackers to affect integrity via vectors
related to Libraries.

Notes

Author	Note
sbeattie	The following algorithms and key sizes are restricted in this release: - MD2 (in either the digest or signature algorithm) - RSA keys less than 1024 bits Upstream is planning to restrict MD5-based signatures in signed JARs in the January 2017 CPU. . The list of disabled algorithms is controlled via a new security property, jdk.jar.disabledAlgorithms, in the java.security file. This property contains a list of disabled algorithms and key sizes for cryptographically signed JAR files.

Author

Note

sbeattie

The following algorithms and key sizes are restricted in this release: - MD2 (in either the digest or signature algorithm) - RSA keys less than 1024 bits Upstream is planning to restrict MD5-based signatures in signed JARs in the January 2017 CPU. . The list of disabled algorithms is controlled via a new security property, jdk.jar.disabledAlgorithms, in the java.security file. This property contains a list of disabled algorithms and key sizes for cryptographically signed JAR files.

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchopenjdk-6< 6b40-1.13.12-0ubuntu0.12.04.2UNKNOWN
ubuntu14.04noarchopenjdk-6< 6b40-1.13.12-0ubuntu0.14.04.3UNKNOWN
ubuntu12.04noarchopenjdk-7< 7u121-2.6.8-1ubuntu0.12.04.1UNKNOWN
ubuntu14.04noarchopenjdk-7< 7u121-2.6.8-1ubuntu0.14.04.1UNKNOWN
ubuntu16.04noarchopenjdk-8< 8u111-b14-2ubuntu0.16.04.2UNKNOWN
ubuntu16.10noarchopenjdk-8< 8u111-b14-2ubuntu0.16.10.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	12.04	noarch	openjdk-6	< 6b40-1.13.12-0ubuntu0.12.04.2	UNKNOWN
ubuntu	14.04	noarch	openjdk-6	< 6b40-1.13.12-0ubuntu0.14.04.3	UNKNOWN
ubuntu	12.04	noarch	openjdk-7	< 7u121-2.6.8-1ubuntu0.12.04.1	UNKNOWN
ubuntu	14.04	noarch	openjdk-7	< 7u121-2.6.8-1ubuntu0.14.04.1	UNKNOWN
ubuntu	16.04	noarch	openjdk-8	< 8u111-b14-2ubuntu0.16.04.2	UNKNOWN
ubuntu	16.10	noarch	openjdk-8	< 8u111-b14-2ubuntu0.16.10.2	UNKNOWN