CVE-2016-5547

OpenJDK: missing ObjectIdentifier length check (Libraries, 8168705)

Severity Score

5.3

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Attend

*SSVC

Descriptions

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS v3.0 Base Score 5.3 (Availability impacts).

Vulnerabilidad en Java SE, Java SE Embedded, componente JRockit de Oracle Java SE (subcomponente: Libraries). Versiones compatibles que están afectadas son Java SE: 7u121 y 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Vulnerabilidad fácilmente explotable permite a atacante no autenticado con acceso a la red, a través de múltiples protocolos, comprometer Java SE, Java SE Embedded, JRockit. Ataques exitosos de esta vulnerabilidad pueden resultar en una capacidad no autorizada para provocar una denegación de servicio parcial (DOS parcial) de Java SE, Java SE Embedded, JRockit. Nota: Aplica a la implementación de cliente y servidor de Java. Esta vulnerabilidad puede ser explotada a través de aplicaciones Java Web Start y applets Java aislados. También puede ser explotada suministrando datos de APIs en el componente especificado sin utilizar aplicaciones Java Web Start o applets Java aislados, como por ejemplo mediante un servicio web. CVSS v3.0 Base Score 5.3 (Impactos de Disponibilidad).

It was discovered that the Libraries component of OpenJDK did not validate the length of the object identifier read from the DER input before allocating memory to store the OID. An attacker able to make a Java application decode a specially crafted DER input could cause the application to consume an excessive amount of memory.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

Low

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:Attend

Exploitation

None

Automatable

Yes

Tech. Impact

Partial

* Organization's Worst-case Scenario

Timeline

2016-06-16 CVE Reserved
2017-01-20 CVE Published
2024-10-09 CVE Updated
2024-11-19 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-770: Allocation of Resources Without Limits or Throttling

CAPEC

References (17)

URL	Tag	Source
http://www.securityfocus.com/bid/95521	Third Party Advisory
http://www.securitytracker.com/id/1037637	Vdb Entry
https://security.netapp.com/advisory/ntap-20170119-0001	X_refsource_confirm

URL	Date	SRC

URL	Date	SRC
http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html	2018-01-05

URL	Date	SRC
http://rhn.redhat.com/errata/RHSA-2017-0175.html	2018-01-05
http://rhn.redhat.com/errata/RHSA-2017-0176.html	2018-01-05
http://rhn.redhat.com/errata/RHSA-2017-0180.html	2018-01-05
http://rhn.redhat.com/errata/RHSA-2017-0263.html	2018-01-05
http://rhn.redhat.com/errata/RHSA-2017-0269.html	2018-01-05
http://rhn.redhat.com/errata/RHSA-2017-0336.html	2018-01-05
http://rhn.redhat.com/errata/RHSA-2017-0337.html	2018-01-05
http://www.debian.org/security/2017/dsa-3782	2018-01-05
https://access.redhat.com/errata/RHSA-2017:1216	2018-01-05
https://security.gentoo.org/glsa/201701-65	2018-01-05
https://security.gentoo.org/glsa/201707-01	2018-01-05
https://access.redhat.com/security/cve/CVE-2016-5547	2017-05-09
https://bugzilla.redhat.com/show_bug.cgi?id=1413764	2017-05-09

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Oracle Search vendor "Oracle"		Jdk Search vendor "Oracle" for product "Jdk"				1.7 Search vendor "Oracle" for product "Jdk" and version "1.7"		update_121		Affected
Oracle Search vendor "Oracle"		Jdk Search vendor "Oracle" for product "Jdk"				1.8 Search vendor "Oracle" for product "Jdk" and version "1.8"		update_111		Affected
Oracle Search vendor "Oracle"		Jdk Search vendor "Oracle" for product "Jdk"				1.8 Search vendor "Oracle" for product "Jdk" and version "1.8"		update_112		Affected
Oracle Search vendor "Oracle"		Jre Search vendor "Oracle" for product "Jre"				1.7 Search vendor "Oracle" for product "Jre" and version "1.7"		update_121		Affected
Oracle Search vendor "Oracle"		Jre Search vendor "Oracle" for product "Jre"				1.8 Search vendor "Oracle" for product "Jre" and version "1.8"		update_111		Affected
Oracle Search vendor "Oracle"		Jre Search vendor "Oracle" for product "Jre"				1.8 Search vendor "Oracle" for product "Jre" and version "1.8"		update_112		Affected
Oracle Search vendor "Oracle"		Jrockit Search vendor "Oracle" for product "Jrockit"				r28.3.12 Search vendor "Oracle" for product "Jrockit" and version "r28.3.12"		-		Affected