CVE-2016-0264 Memory corruption in n/a
Remote attackers can execute arbitrary code via a buffer overflow in the IBM Java Virtual Machine, requiring an upgrade to patched versions.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2016-0264?
CVE-2016-0264 is a medium-severity memory corruption vulnerability in Redhat Enterprise Linux Desktop, published on 24 May 2016. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Buffer overflow in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40 (7.1.3.40), and 8 before SR3 (8.0.3.0) allows remote attackers to execute arbitrary code via unspecified vectors.
Weakness: CWE-119
Which versions are affected by CVE-2016-0264?
It affects 13 products.
Products include Ibm Java Sdk, Redhat Enterprise Linux Desktop, Redhat Enterprise Linux Hpc Node Supplementary, Redhat Enterprise Linux Server, Redhat Enterprise Linux Server Eus, Redhat Enterprise Linux Workstation and 7 more.
How do I fix CVE-2016-0264?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2016-0264 being exploited?
There is no known exploitation of CVE-2016-0264 in the wild and no public exploit code.
Other vulnerabilities in Redhat Enterprise Linux Desktop
Sources
Also known as GHSA-3p6j-59jx-xr88.