Read the docs
TI-2016-08241 Aliases CVE-2016-10165GHSA-2j4r-j436-59p3

The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote…

Priority LOW 36CWE-125Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · None · High
Fix status
Partial Red Hat: 36 fixed, 1 without a fix

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat.

Summary

The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.02762 86th percentileScored 2026-11-07
Fix Partial Red Hat: 8 advisoriesRed Hat: 36 fixed, 1 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 58

CPEVersionsRoleVendor
cpe:2.3:a:littlecms:little_cms_color_engine:*:*:*:*:*:*:*:*before 2.11Vulnerablelittlecms
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*12.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*14.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*16.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:esm:*:*:*18.04VulnerableCanonical
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*8.0VulnerableDebian
cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*42.1VulnerableopenSUSE
cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*5.8VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*5.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
  • cpe:2.3:a:littlecms:little_cms_color_engine:*:*:*:*:*:*:*:* Versions before 2.11 Vulnerable ·littlecms
  • cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:* Versions 12.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:* Versions 14.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:* Versions 16.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:esm:*:*:* Versions 18.04 Vulnerable ·Canonical
  • cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Debian
  • cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:* Versions 42.1 Vulnerable ·openSUSE
  • cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:* Versions 5.8 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
Show 48 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*5.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*7.3VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*7.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*7.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*7.7VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*7.3VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*7.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*7.5VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*7.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.7:*:*:*:*:*:*:*7.7VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*7.3VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*7.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*7.7VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*5.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*7.3VulnerableNetApp
cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*9.5VulnerableNetApp
cpe:2.3:a:netapp:e-series_santricity_management:-:*:*:*:*:vmware_sra:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:e-series_santricity_management:-:*:*:*:*:vmware_vasa:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:e-series_santricity_management:-:*:*:*:*:vmware_vcenter:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:e-series_santricity_os_controller:11.0:*:*:*:*:*:*:*11.0VulnerableNetApp
cpe:2.3:a:netapp:e-series_santricity_os_controller:11.0.0:*:*:*:*:*:*:*11.0.0VulnerableNetApp
cpe:2.3:a:netapp:e-series_santricity_os_controller:11.20:*:*:*:*:*:*:*11.20VulnerableNetApp
cpe:2.3:a:netapp:e-series_santricity_os_controller:11.25:*:*:*:*:*:*:*11.25VulnerableNetApp
cpe:2.3:a:netapp:e-series_santricity_os_controller:11.30:*:*:*:*:*:*:*11.30VulnerableNetApp
cpe:2.3:a:netapp:e-series_santricity_os_controller:11.30.5r3:*:*:*:*:*:*:*11.30.5r3VulnerableNetApp
cpe:2.3:a:netapp:e-series_santricity_os_controller:11.40:*:*:*:*:*:*:*11.40VulnerableNetApp
cpe:2.3:a:netapp:e-series_santricity_os_controller:11.40.3r2:*:*:*:*:*:*:*11.40.3r2VulnerableNetApp
cpe:2.3:a:netapp:e-series_santricity_os_controller:11.40.5:*:*:*:*:*:*:*11.40.5VulnerableNetApp
cpe:2.3:a:netapp:e-series_santricity_os_controller:11.50.1:*:*:*:*:*:*:*11.50.1VulnerableNetApp
cpe:2.3:a:netapp:e-series_santricity_os_controller:11.50.2:-:*:*:*:*:*:*11.50.2VulnerableNetApp
cpe:2.3:a:netapp:e-series_santricity_os_controller:11.50.2:p1:*:*:*:*:*:*11.50.2 p1VulnerableNetApp
cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60:*:*:*:*:*:*:*11.60VulnerableNetApp
cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60.0:*:*:*:*:*:*:*11.60.0VulnerableNetApp
cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60.1:*:*:*:*:*:*:*11.60.1VulnerableNetApp
cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60.3:*:*:*:*:*:*:*11.60.3VulnerableNetApp
cpe:2.3:a:netapp:e-series_santricity_os_controller:11.70.1:*:*:*:*:*:*:*11.70.1VulnerableNetApp
cpe:2.3:a:netapp:e-series_santricity_os_controller:11.70.2:*:*:*:*:*:*:*11.70.2VulnerableNetApp
cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:oncommand_unified_manager:7.1:*:*:*:*:vmware_vsphere:*:*7.1VulnerableNetApp
  • cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:* Versions 7.3 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:* Versions 7.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:* Versions 7.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:* Versions 7.7 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:* Versions 7.3 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:* Versions 7.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:* Versions 7.5 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:* Versions 7.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_eus:7.7:*:*:*:*:*:*:* Versions 7.7 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:* Versions 7.3 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:* Versions 7.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:* Versions 7.7 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:* Versions 7.3 Vulnerable ·NetApp
  • cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:* Versions 9.5 Vulnerable ·NetApp
  • cpe:2.3:a:netapp:e-series_santricity_management:-:*:*:*:*:vmware_sra:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:e-series_santricity_management:-:*:*:*:*:vmware_vasa:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:e-series_santricity_management:-:*:*:*:*:vmware_vcenter:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:e-series_santricity_os_controller:11.0:*:*:*:*:*:*:* Versions 11.0 Vulnerable ·NetApp
  • cpe:2.3:a:netapp:e-series_santricity_os_controller:11.0.0:*:*:*:*:*:*:* Versions 11.0.0 Vulnerable ·NetApp
  • cpe:2.3:a:netapp:e-series_santricity_os_controller:11.20:*:*:*:*:*:*:* Versions 11.20 Vulnerable ·NetApp
  • cpe:2.3:a:netapp:e-series_santricity_os_controller:11.25:*:*:*:*:*:*:* Versions 11.25 Vulnerable ·NetApp
  • cpe:2.3:a:netapp:e-series_santricity_os_controller:11.30:*:*:*:*:*:*:* Versions 11.30 Vulnerable ·NetApp
  • cpe:2.3:a:netapp:e-series_santricity_os_controller:11.30.5r3:*:*:*:*:*:*:* Versions 11.30.5r3 Vulnerable ·NetApp
  • cpe:2.3:a:netapp:e-series_santricity_os_controller:11.40:*:*:*:*:*:*:* Versions 11.40 Vulnerable ·NetApp
  • cpe:2.3:a:netapp:e-series_santricity_os_controller:11.40.3r2:*:*:*:*:*:*:* Versions 11.40.3r2 Vulnerable ·NetApp
  • cpe:2.3:a:netapp:e-series_santricity_os_controller:11.40.5:*:*:*:*:*:*:* Versions 11.40.5 Vulnerable ·NetApp
  • cpe:2.3:a:netapp:e-series_santricity_os_controller:11.50.1:*:*:*:*:*:*:* Versions 11.50.1 Vulnerable ·NetApp
  • cpe:2.3:a:netapp:e-series_santricity_os_controller:11.50.2:-:*:*:*:*:*:* Versions 11.50.2 Vulnerable ·NetApp
  • cpe:2.3:a:netapp:e-series_santricity_os_controller:11.50.2:p1:*:*:*:*:*:* Versions 11.50.2 p1 Vulnerable ·NetApp
  • cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60:*:*:*:*:*:*:* Versions 11.60 Vulnerable ·NetApp
  • cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60.0:*:*:*:*:*:*:* Versions 11.60.0 Vulnerable ·NetApp
  • cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60.1:*:*:*:*:*:*:* Versions 11.60.1 Vulnerable ·NetApp
  • cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60.3:*:*:*:*:*:*:* Versions 11.60.3 Vulnerable ·NetApp
  • cpe:2.3:a:netapp:e-series_santricity_os_controller:11.70.1:*:*:*:*:*:*:* Versions 11.70.1 Vulnerable ·NetApp
  • cpe:2.3:a:netapp:e-series_santricity_os_controller:11.70.2:*:*:*:*:*:*:* Versions 11.70.2 Vulnerable ·NetApp
  • cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:oncommand_unified_manager:7.1:*:*:*:*:vmware_vsphere:*:* Versions 7.1 Vulnerable ·NetApp

Remediation

Red Hat 8 advisories

  • RHSA-2017:3453 Released 2017-12-13 · Red Hat rating Important
    java-1.8.0-ibm security update
    • Red Hat Satellite 5.8 (RHEL v.6) java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9, java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9
    • Red Hat Satellite 5.8 ELS (RHEL v.6) java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9, java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9
  • RHSA-2017:3268 Released 2017-11-28 · Red Hat rating Critical
    java-1.7.1-ibm security update
    • Red Hat Enterprise Linux Client Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7, java-1.7.1-ibm-demo-1:1.7.1.4.15-1jpp.2.el7, java-1.7.1-ibm-devel-1:1.7.1.4.15-1jpp.2.el7 +3
    • Red Hat Enterprise Linux ComputeNode Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7, java-1.7.1-ibm-demo-1:1.7.1.4.15-1jpp.2.el7, java-1.7.1-ibm-devel-1:1.7.1.4.15-1jpp.2.el7 +1
    • Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9, java-1.7.1-ibm-demo-1:1.7.1.4.15-1jpp.3.el6_9, java-1.7.1-ibm-devel-1:1.7.1.4.15-1jpp.3.el6_9 +3
    • Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9, java-1.7.1-ibm-demo-1:1.7.1.4.15-1jpp.3.el6_9, java-1.7.1-ibm-devel-1:1.7.1.4.15-1jpp.3.el6_9 +1
    • Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9, java-1.7.1-ibm-demo-1:1.7.1.4.15-1jpp.3.el6_9, java-1.7.1-ibm-devel-1:1.7.1.4.15-1jpp.3.el6_9 +3
    • Red Hat Enterprise Linux Server Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7, java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7.ppc, java-1.7.1-ibm-demo-1:1.7.1.4.15-1jpp.2.el7 +6
    • Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9, java-1.7.1-ibm-demo-1:1.7.1.4.15-1jpp.3.el6_9, java-1.7.1-ibm-devel-1:1.7.1.4.15-1jpp.3.el6_9 +3
    • Red Hat Enterprise Linux Workstation Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7, java-1.7.1-ibm-demo-1:1.7.1.4.15-1jpp.2.el7, java-1.7.1-ibm-devel-1:1.7.1.4.15-1jpp.2.el7 +3
  • RHSA-2017:3267 Released 2017-11-28 · Red Hat rating Critical
    java-1.8.0-ibm security update
    • Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9, java-1.8.0-ibm-demo-1:1.8.0.5.5-1jpp.1.el6_9, java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9 +3
    • Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9, java-1.8.0-ibm-demo-1:1.8.0.5.5-1jpp.1.el6_9, java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9 +1
    • Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9, java-1.8.0-ibm-demo-1:1.8.0.5.5-1jpp.1.el6_9, java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9 +3
    • Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9, java-1.8.0-ibm-demo-1:1.8.0.5.5-1jpp.1.el6_9, java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9 +3
Show 5 more Red Hat advisories
  • RHSA-2017:3264 Released 2017-11-27 · Red Hat rating Critical
    java-1.8.0-ibm security update
    • Red Hat Enterprise Linux Client Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7, java-1.8.0-ibm-demo-1:1.8.0.5.5-1jpp.2.el7, java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.2.el7 +3
    • Red Hat Enterprise Linux ComputeNode Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7, java-1.8.0-ibm-demo-1:1.8.0.5.5-1jpp.2.el7, java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.2.el7 +1
    • Red Hat Enterprise Linux Server Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7, java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7.ppc, java-1.8.0-ibm-demo-1:1.8.0.5.5-1jpp.2.el7 +5
    • Red Hat Enterprise Linux Workstation Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7, java-1.8.0-ibm-demo-1:1.8.0.5.5-1jpp.2.el7, java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.2.el7 +3
  • RHSA-2017:3046 Released 2017-10-24 · Red Hat rating Important
    java-1.7.0-oracle security update
    • Oracle Java for Red Hat Enterprise Linux Client (v. 7) java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7, java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7, java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7 +3
    • Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7) java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7, java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7, java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7 +1
    • Oracle Java for Red Hat Enterprise Linux Desktop 6 java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6, java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6, java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6 +3
    • Oracle Java for Red Hat Enterprise Linux HPC Node 6 java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6, java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6, java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6 +3
    • Oracle Java for Red Hat Enterprise Linux Server (v. 7) java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7, java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7, java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7 +3
    • Oracle Java for Red Hat Enterprise Linux Server 6 java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6, java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6, java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6 +3
    • Oracle Java for Red Hat Enterprise Linux Workstation (v. 7) java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7, java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7, java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7 +3
    • Oracle Java for Red Hat Enterprise Linux Workstation 6 java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6, java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6, java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6 +3
  • RHSA-2017:2999 Released 2017-10-23 · Red Hat rating Critical
    java-1.8.0-oracle security update
    • Oracle Java for Red Hat Enterprise Linux Client (v. 7) java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7, java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7, java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7 +3
    • Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7) java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7, java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7, java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7 +1
    • Oracle Java for Red Hat Enterprise Linux Desktop 6 java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6, java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6, java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6 +3
    • Oracle Java for Red Hat Enterprise Linux HPC Node 6 java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6, java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6, java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6 +3
    • Oracle Java for Red Hat Enterprise Linux Server (v. 7) java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7, java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7, java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7 +3
    • Oracle Java for Red Hat Enterprise Linux Server 6 java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6, java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6, java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6 +3
    • Oracle Java for Red Hat Enterprise Linux Workstation (v. 7) java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7, java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7, java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7 +3
    • Oracle Java for Red Hat Enterprise Linux Workstation 6 java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6, java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6, java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6 +3
  • RHSA-2016:2658 Released 2016-11-07 · Red Hat rating Important
    java-1.7.0-openjdk security update
    • Red Hat Enterprise Linux (v. 5 server) java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11, java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11.i386, java-1.7.0-openjdk-demo-1:1.7.0.121-2.6.8.1.el5_11 +7
    • Red Hat Enterprise Linux Client (v. 7) java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3, java-1.7.0-openjdk-headless-1:1.7.0.121-2.6.8.0.el7_3
    • Red Hat Enterprise Linux Client Optional (v. 7) java-1.7.0-openjdk-accessibility-1:1.7.0.121-2.6.8.0.el7_3, java-1.7.0-openjdk-demo-1:1.7.0.121-2.6.8.0.el7_3, java-1.7.0-openjdk-devel-1:1.7.0.121-2.6.8.0.el7_3 +2
    • Red Hat Enterprise Linux ComputeNode (v. 7) java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3, java-1.7.0-openjdk-headless-1:1.7.0.121-2.6.8.0.el7_3
    • Red Hat Enterprise Linux ComputeNode Optional (v. 7) java-1.7.0-openjdk-accessibility-1:1.7.0.121-2.6.8.0.el7_3, java-1.7.0-openjdk-demo-1:1.7.0.121-2.6.8.0.el7_3, java-1.7.0-openjdk-devel-1:1.7.0.121-2.6.8.0.el7_3 +2
    • Red Hat Enterprise Linux Desktop (v. 5 client) java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11, java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11.i386, java-1.7.0-openjdk-demo-1:1.7.0.121-2.6.8.1.el5_11 +7
    • Red Hat Enterprise Linux Desktop (v. 6) java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8, java-1.7.0-openjdk-devel-1:1.7.0.121-2.6.8.1.el6_8
    • Red Hat Enterprise Linux Desktop Optional (v. 6) java-1.7.0-openjdk-demo-1:1.7.0.121-2.6.8.1.el6_8, java-1.7.0-openjdk-javadoc-1:1.7.0.121-2.6.8.1.el6_8, java-1.7.0-openjdk-src-1:1.7.0.121-2.6.8.1.el6_8
    • Red Hat Enterprise Linux HPC Node (v. 6) java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8, java-1.7.0-openjdk-devel-1:1.7.0.121-2.6.8.1.el6_8
    • Red Hat Enterprise Linux HPC Node Optional (v. 6) java-1.7.0-openjdk-demo-1:1.7.0.121-2.6.8.1.el6_8, java-1.7.0-openjdk-javadoc-1:1.7.0.121-2.6.8.1.el6_8, java-1.7.0-openjdk-src-1:1.7.0.121-2.6.8.1.el6_8
    • Red Hat Enterprise Linux Server (v. 6) java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8, java-1.7.0-openjdk-devel-1:1.7.0.121-2.6.8.1.el6_8
    • Red Hat Enterprise Linux Server (v. 7) java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3, java-1.7.0-openjdk-devel-1:1.7.0.121-2.6.8.0.el7_3, java-1.7.0-openjdk-headless-1:1.7.0.121-2.6.8.0.el7_3
    • Red Hat Enterprise Linux Server Optional (v. 6) java-1.7.0-openjdk-demo-1:1.7.0.121-2.6.8.1.el6_8, java-1.7.0-openjdk-javadoc-1:1.7.0.121-2.6.8.1.el6_8, java-1.7.0-openjdk-src-1:1.7.0.121-2.6.8.1.el6_8
    • Red Hat Enterprise Linux Server Optional (v. 7) java-1.7.0-openjdk-accessibility-1:1.7.0.121-2.6.8.0.el7_3, java-1.7.0-openjdk-demo-1:1.7.0.121-2.6.8.0.el7_3, java-1.7.0-openjdk-javadoc-1:1.7.0.121-2.6.8.0.el7_3 +1
    • Red Hat Enterprise Linux Workstation (v. 6) java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8, java-1.7.0-openjdk-devel-1:1.7.0.121-2.6.8.1.el6_8
    • Red Hat Enterprise Linux Workstation (v. 7) java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3, java-1.7.0-openjdk-devel-1:1.7.0.121-2.6.8.0.el7_3, java-1.7.0-openjdk-headless-1:1.7.0.121-2.6.8.0.el7_3
    • Red Hat Enterprise Linux Workstation Optional (v. 6) java-1.7.0-openjdk-demo-1:1.7.0.121-2.6.8.1.el6_8, java-1.7.0-openjdk-javadoc-1:1.7.0.121-2.6.8.1.el6_8, java-1.7.0-openjdk-src-1:1.7.0.121-2.6.8.1.el6_8
    • Red Hat Enterprise Linux Workstation Optional (v. 7) java-1.7.0-openjdk-accessibility-1:1.7.0.121-2.6.8.0.el7_3, java-1.7.0-openjdk-demo-1:1.7.0.121-2.6.8.0.el7_3, java-1.7.0-openjdk-javadoc-1:1.7.0.121-2.6.8.0.el7_3 +1
  • RHSA-2016:2079 Released 2016-10-19 · Red Hat rating Critical
    java-1.8.0-openjdk security update
    • Red Hat Enterprise Linux Client (v. 7) java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2, java-1.8.0-openjdk-headless-1:1.8.0.111-1.b15.el7_2
    • Red Hat Enterprise Linux Client Optional (v. 7) java-1.8.0-openjdk-accessibility-1:1.8.0.111-1.b15.el7_2, java-1.8.0-openjdk-accessibility-debug-1:1.8.0.111-1.b15.el7_2, java-1.8.0-openjdk-debug-1:1.8.0.111-1.b15.el7_2 +9
    • Red Hat Enterprise Linux ComputeNode (v. 7) java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2, java-1.8.0-openjdk-headless-1:1.8.0.111-1.b15.el7_2
    • Red Hat Enterprise Linux ComputeNode Optional (v. 7) java-1.8.0-openjdk-accessibility-1:1.8.0.111-1.b15.el7_2, java-1.8.0-openjdk-accessibility-debug-1:1.8.0.111-1.b15.el7_2, java-1.8.0-openjdk-debug-1:1.8.0.111-1.b15.el7_2 +9
    • Red Hat Enterprise Linux Desktop (v. 6) java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8, java-1.8.0-openjdk-headless-1:1.8.0.111-0.b15.el6_8
    • Red Hat Enterprise Linux Desktop Optional (v. 6) java-1.8.0-openjdk-debug-1:1.8.0.111-0.b15.el6_8, java-1.8.0-openjdk-demo-1:1.8.0.111-0.b15.el6_8, java-1.8.0-openjdk-demo-debug-1:1.8.0.111-0.b15.el6_8 +7
    • Red Hat Enterprise Linux HPC Node (v. 6) java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8, java-1.8.0-openjdk-devel-1:1.8.0.111-0.b15.el6_8, java-1.8.0-openjdk-headless-1:1.8.0.111-0.b15.el6_8
    • Red Hat Enterprise Linux HPC Node Optional (v. 6) java-1.8.0-openjdk-debug-1:1.8.0.111-0.b15.el6_8, java-1.8.0-openjdk-demo-1:1.8.0.111-0.b15.el6_8, java-1.8.0-openjdk-demo-debug-1:1.8.0.111-0.b15.el6_8 +6
    • Red Hat Enterprise Linux Server (v. 6) java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8, java-1.8.0-openjdk-devel-1:1.8.0.111-0.b15.el6_8, java-1.8.0-openjdk-headless-1:1.8.0.111-0.b15.el6_8
    • Red Hat Enterprise Linux Server (v. 7) java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2, java-1.8.0-openjdk-devel-1:1.8.0.111-1.b15.el7_2, java-1.8.0-openjdk-headless-1:1.8.0.111-1.b15.el7_2
    • Red Hat Enterprise Linux Server Optional (v. 6) java-1.8.0-openjdk-debug-1:1.8.0.111-0.b15.el6_8, java-1.8.0-openjdk-demo-1:1.8.0.111-0.b15.el6_8, java-1.8.0-openjdk-demo-debug-1:1.8.0.111-0.b15.el6_8 +6
    • Red Hat Enterprise Linux Server Optional (v. 7) java-1.8.0-openjdk-accessibility-1:1.8.0.111-1.b15.el7_2, java-1.8.0-openjdk-accessibility-debug-1:1.8.0.111-1.b15.el7_2, java-1.8.0-openjdk-debug-1:1.8.0.111-1.b15.el7_2 +8
    • Red Hat Enterprise Linux Workstation (v. 6) java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8, java-1.8.0-openjdk-devel-1:1.8.0.111-0.b15.el6_8, java-1.8.0-openjdk-headless-1:1.8.0.111-0.b15.el6_8
    • Red Hat Enterprise Linux Workstation (v. 7) java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2, java-1.8.0-openjdk-devel-1:1.8.0.111-1.b15.el7_2, java-1.8.0-openjdk-headless-1:1.8.0.111-1.b15.el7_2
    • Red Hat Enterprise Linux Workstation Optional (v. 6) java-1.8.0-openjdk-debug-1:1.8.0.111-0.b15.el6_8, java-1.8.0-openjdk-demo-1:1.8.0.111-0.b15.el6_8, java-1.8.0-openjdk-demo-debug-1:1.8.0.111-0.b15.el6_8 +6
    • Red Hat Enterprise Linux Workstation Optional (v. 7) java-1.8.0-openjdk-accessibility-1:1.8.0.111-1.b15.el7_2, java-1.8.0-openjdk-accessibility-debug-1:1.8.0.111-1.b15.el7_2, java-1.8.0-openjdk-debug-1:1.8.0.111-1.b15.el7_2 +8

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 7AffectedNo fix planned: Will not fix
Oracle Java for Red Hat Enterprise Linux Client (v. 7)Fixed RHSA-2017:2999, RHSA-2017:3046
Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)Fixed RHSA-2017:2999, RHSA-2017:3046
Oracle Java for Red Hat Enterprise Linux Desktop 6Fixed RHSA-2017:2999, RHSA-2017:3046
Oracle Java for Red Hat Enterprise Linux HPC Node 6Fixed RHSA-2017:2999, RHSA-2017:3046
Oracle Java for Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2017:2999, RHSA-2017:3046
Oracle Java for Red Hat Enterprise Linux Server 6Fixed RHSA-2017:2999, RHSA-2017:3046
Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2017:2999, RHSA-2017:3046
Oracle Java for Red Hat Enterprise Linux Workstation 6Fixed RHSA-2017:2999, RHSA-2017:3046
Red Hat Enterprise Linux (v. 5 server)Fixed RHSA-2016:2658
Red Hat Enterprise Linux Client (v. 7)Fixed RHSA-2016:2079, RHSA-2016:2658
Red Hat Enterprise Linux Client Optional (v. 7)Fixed RHSA-2016:2079, RHSA-2016:2658
Red Hat Enterprise Linux Client Supplementary (v. 7)Fixed RHSA-2017:3264, RHSA-2017:3268
Red Hat Enterprise Linux ComputeNode (v. 7)Fixed RHSA-2016:2079, RHSA-2016:2658
Red Hat Enterprise Linux ComputeNode Optional (v. 7)Fixed RHSA-2016:2079, RHSA-2016:2658
Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)Fixed RHSA-2017:3264, RHSA-2017:3268
Red Hat Enterprise Linux Desktop (v. 5 client)Fixed RHSA-2016:2658
Red Hat Enterprise Linux Desktop (v. 6)Fixed RHSA-2016:2079, RHSA-2016:2658
Red Hat Enterprise Linux Desktop Optional (v. 6)Fixed RHSA-2016:2079, RHSA-2016:2658
Red Hat Enterprise Linux Desktop Supplementary (v. 6)Fixed RHSA-2017:3267, RHSA-2017:3268
Red Hat Enterprise Linux HPC Node (v. 6)Fixed RHSA-2016:2079, RHSA-2016:2658
Red Hat Enterprise Linux HPC Node Optional (v. 6)Fixed RHSA-2016:2079, RHSA-2016:2658
Red Hat Enterprise Linux HPC Node Supplementary (v. 6)Fixed RHSA-2017:3267, RHSA-2017:3268
Red Hat Enterprise Linux Server (v. 6)Fixed RHSA-2016:2079, RHSA-2016:2658
Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2016:2079, RHSA-2016:2658
Red Hat Enterprise Linux Server Optional (v. 6)Fixed RHSA-2016:2079, RHSA-2016:2658
Red Hat Enterprise Linux Server Optional (v. 7)Fixed RHSA-2016:2079, RHSA-2016:2658
Red Hat Enterprise Linux Server Supplementary (v. 6)Fixed RHSA-2017:3267, RHSA-2017:3268
Red Hat Enterprise Linux Server Supplementary (v. 7)Fixed RHSA-2017:3264, RHSA-2017:3268
Red Hat Enterprise Linux Workstation (v. 6)Fixed RHSA-2016:2079, RHSA-2016:2658
Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2016:2079, RHSA-2016:2658
Red Hat Enterprise Linux Workstation Optional (v. 6)Fixed RHSA-2016:2079, RHSA-2016:2658
Red Hat Enterprise Linux Workstation Optional (v. 7)Fixed RHSA-2016:2079, RHSA-2016:2658
Red Hat Enterprise Linux Workstation Supplementary (v. 6)Fixed RHSA-2017:3267, RHSA-2017:3268
Red Hat Enterprise Linux Workstation Supplementary (v. 7)Fixed RHSA-2017:3264, RHSA-2017:3268
Red Hat Satellite 5.8 (RHEL v.6)Fixed RHSA-2017:3453
Red Hat Satellite 5.8 ELS (RHEL v.6)Fixed RHSA-2017:3453
Not affected: 3 products
  • Red Hat Enterprise Linux 5
  • Red Hat Enterprise Linux 6
  • Red Hat OpenShift Enterprise 2

Timeline

  1. 2026-10-02 Threatist record created from CVE-2016-10165
  2. 2026-10-03 Alias added: GHSA-2j4r-j436-59p3
  3. 2026-10-16 CISA SSVC decision points changed

References

Patch 4

Advisory 13

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences