CVE-2015-5041
The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before...
9.1 CriticalFix available
CVE-2015-5041 is a critical vulnerability (CVSS 9.1) in Ibm Java Sdk, published February 9, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.90%, the 90th percentile. Fixed in java-1.8.0-ibm 1:1.8.0.2.10-1jpp.1.el7.
The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before SR9 FP30, and 7 R1 before SR3 FP30 allows remote attackers to obtain sensitive information or inject data by invoking non-public interface methods.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- None
Exploit likelihood
3.90%Up 2.5 points since Feb 4, 2022
What each source reports
NVD Score used
The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before SR9 FP30, and 7 R1 before SR3 FP30 allows remote attackers to obtain sensitive information or inject data by invoking non-public interface methods.
- Record
CVE-2015-5041- CVSS 3.0
- 9.1 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - CVSS 2.0
- 6.4 Medium
AV:N/AC:L/Au:N/C:P/I:P/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before SR9 FP30, and 7 R1 before SR3 FP30 allows remote attackers to obtain sensitive information or inject data by invoking non-public interface methods.
- Record
CVE-2015-5041- Updated
- 2026-11-02
EUVDEUVD-2015-5058 No score
The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before SR9 FP30, and 7 R1 before SR3 FP30 allows remote attackers to obtain sensitive information or inject data by invoking non-public interface methods.
- Record
EUVD-2015-5058- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7v4m-8wwx-8xgc
The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before...
The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before SR9 FP30, and 7 R1 before SR3 FP30 allows remote attackers to obtain sensitive information or inject data by invoking non-public interface methods.
- Record
GHSA-7v4m-8wwx-8xgc- CVSS 3.0
- 9.1 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
OSVRHSA-2016:0099
Red Hat Security Advisory: java-1.7.1-ibm security update
- Record
RHSA-2016:0099- CVSS 3.0
- 7.6 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H - Updated
- 2026-11-02
OSVRHSA-2016:0100
Red Hat Security Advisory: java-1.7.0-ibm security update
- Record
RHSA-2016:0100- CVSS 3.0
- 7.6 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H - Updated
- 2026-11-02
Show 10 moreShow less
OSVRHSA-2016:0101
Red Hat Security Advisory: java-1.6.0-ibm security update
- Record
RHSA-2016:0101- CVSS 3.0
- 7.6 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H - Updated
- 2026-11-02
OSVRHSA-2016:1430
Red Hat Security Advisory: java-1.7.0-ibm and java-1.7.1-ibm security update
- Record
RHSA-2016:1430- CVSS 3.0
- 7.6 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H - Updated
- 2026-11-02
OSVSUSE-SU-2016:0390-1 No score
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following security issues by updating to 8.0-2.10 (bsc#963937):
- CVE-2015-5041: Could could have invoked non-public interface methods under certain circumstances
- CVE-2015-7575: The TLS protocol could allow weaker than expected security caused by a collision attack when using the MD5 hash function for signing a ServerKeyExchange message during a TLS handshake. An attacker could exploit this vulnerability using man-in-the-middle techniques to impersonate a TLS server and obtain credentials
- CVE-2015-8126: buffer overflow in libpng caused by improper bounds checking by the png_set_PLTE() and png_get_PLTE() functions
- CVE-2015-8472: buffer overflow in libpng caused by improper bounds checking by the png_set_PLTE() and png_get_PLTE() functions
- CVE-2016-0402: An unspecified vulnerability related to the Networking component has no confidentiality impact, partial integrity impact, and no availability impact
- CVE-2016-0448: An unspecified vulnerability related to the JMX component could allow a remote attacker to obtain sensitive information
- CVE-2016-0466: An unspecified vulnerability related to the JAXP component could allow a remote attacker to cause a denial of service
- CVE-2016-0475: An unspecified vulnerability related to the Libraries component has partial confidentiality impact, partial integrity impact, and no availability impact
- CVE-2016-0483: An unspecified vulnerability related to the AWT component has complete confidentiality impact, complete integrity impact, and complete availability impact
- CVE-2016-0494: An unspecified vulnerability related to the 2D component has complete confidentiality impact, complete integrity impact, and complete availability impact
The following bugs were fixed:
- bsc#960402: resolve package conflicts in devel package
- Record
SUSE-SU-2016:0390-1- Updated
- 2026-11-02
OSVSUSE-SU-2016:0399-1 No score
Security update for java-1_7_1-ibm
This update for java-1_7_1-ibm fixes the following issues by updating to 7.1-3.30 (bsc#963937):
- CVE-2015-5041: Could could have invoked non-public interface methods under certain circumstances
- CVE-2015-7575: The TLS protocol could allow weaker than expected security caused by a collision attack when using the MD5 hash function for signing a ServerKeyExchange message during a TLS handshake. An attacker could exploit this vulnerability using man-in-the-middle techniques to impersonate a TLS server and obtain credentials
- CVE-2015-7981: libpng could allow a remote attacker to obtain sensitive information, caused by an out-of-bounds read in the png_convert_to_rfc1123 function. An attacker could exploit this vulnerability to obtain sensitive information
- CVE-2015-8126: buffer overflow in libpng caused by improper bounds checking by the png_set_PLTE() and png_get_PLTE() functions
- CVE-2015-8472: buffer overflow in libpng caused by improper bounds checking by the png_set_PLTE() and png_get_PLTE() functions
- CVE-2015-8540: libpng is vulnerable to a buffer overflow, caused by a read underflow in png_check_keyword in pngwutil.c. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.
- CVE-2016-0402: An unspecified vulnerability related to the Networking component has no confidentiality impact, partial integrity impact, and no availability impact
- CVE-2016-0448: An unspecified vulnerability related to the JMX component could allow a remote attacker to obtain sensitive information
- CVE-2016-0466: An unspecified vulnerability related to the JAXP component could allow a remote attacker to cause a denial of service
- CVE-2016-0483: An unspecified vulnerability related to the AWT component has complete confidentiality impact, complete integrity impact, and complete availability impact
- CVE-2016-0494: An unspecified vulnerability related to the 2D component has complete confidentiality impact, complete integrity impact, and complete availability impact
The following bugs were fixed:
- bsc#960402: resolve package conflicts in devel package
- Record
SUSE-SU-2016:0399-1- Updated
- 2026-11-02
OSVSUSE-SU-2016:0401-1 No score
Security update for java-1_7_1-ibm
This update for java-1_7_1-ibm fixes the following issues by updating to 7.1-3.30 (bsc#963937):
- CVE-2015-5041: Could could have invoked non-public interface methods under certain circumstances
- CVE-2015-7575: The TLS protocol could allow weaker than expected security caused by a collision attack when using the MD5 hash function for signing a ServerKeyExchange message during a TLS handshake. An attacker could exploit this vulnerability using man-in-the-middle techniques to impersonate a TLS server and obtain credentials
- CVE-2015-7981: libpng could allow a remote attacker to obtain sensitive information, caused by an out-of-bounds read in the png_convert_to_rfc1123 function. An attacker could exploit this vulnerability to obtain sensitive information
- CVE-2015-8126: buffer overflow in libpng caused by improper bounds checking by the png_set_PLTE() and png_get_PLTE() functions
- CVE-2015-8472: buffer overflow in libpng caused by improper bounds checking by the png_set_PLTE() and png_get_PLTE() functions
- CVE-2015-8540: libpng is vulnerable to a buffer overflow, caused by a read underflow in png_check_keyword in pngwutil.c. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.
- CVE-2016-0402: An unspecified vulnerability related to the Networking component has no confidentiality impact, partial integrity impact, and no availability impact
- CVE-2016-0448: An unspecified vulnerability related to the JMX component could allow a remote attacker to obtain sensitive information
- CVE-2016-0466: An unspecified vulnerability related to the JAXP component could allow a remote attacker to cause a denial of service
- CVE-2016-0483: An unspecified vulnerability related to the AWT component has complete confidentiality impact, complete integrity impact, and complete availability impact
- CVE-2016-0494: An unspecified vulnerability related to the 2D component has complete confidentiality impact, complete integrity impact, and complete availability impact
The following bugs were fixed:
- bsc#960402: resolve package conflicts in devel package
- Record
SUSE-SU-2016:0401-1- Updated
- 2026-11-02
OSVSUSE-SU-2016:0428-1 No score
Security update for java-1_6_0-ibm
This update for java-1_6_0-ibm fixes the following issues by updating to 6.0-16.20 (bsc#963937)
- CVE-2015-5041: Could could have invoked non-public interface methods under certain circumstances
- CVE-2015-7575: The TLS protocol could allow weaker than expected security caused by a collision attack when using the MD5 hash function for signing a ServerKeyExchange message during a TLS handshake. An attacker could exploit this vulnerability using man-in-the-middle techniques to impersonate a TLS server and obtain credentials
- CVE-2015-7981: libpng could allow a remote attacker to obtain sensitive information, caused by an out-of-bounds read in the png_convert_to_rfc1123 function. An attacker could exploit this vulnerability to obtain sensitive information
- CVE-2015-8126: buffer overflow in libpng caused by improper bounds checking by the png_set_PLTE() and png_get_PLTE() functions
- CVE-2015-8472: buffer overflow in libpng caused by improper bounds checking by the png_set_PLTE() and png_get_PLTE() functions
- CVE-2015-8540: libpng is vulnerable to a buffer overflow, caused by a read underflow in png_check_keyword in pngwutil.c. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.
- CVE-2016-0402: An unspecified vulnerability related to the Networking component has no confidentiality impact, partial integrity impact, and no availability impact
- CVE-2016-0448: An unspecified vulnerability related to the JMX component could allow a remote attacker to obtain sensitive information
- CVE-2016-0466: An unspecified vulnerability related to the JAXP component could allow a remote attacker to cause a denial of service
- CVE-2016-0483: An unspecified vulnerability related to the AWT component has complete confidentiality impact, complete integrity impact, and complete availability impact
- CVE-2016-0494: An unspecified vulnerability related to the 2D component has complete confidentiality impact, complete integrity impact, and complete availability impact
The following bugs were fixed:
- bsc#960402: resolve package conflicts in devel package
- bsc#960286: resolve package conflicts in the fonts subpackage
- Record
SUSE-SU-2016:0428-1- Updated
- 2026-11-02
OSVSUSE-SU-2016:0431-1 No score
Security update for java-1_6_0-ibm
This update for java-1_6_0-ibm fixes the following issues by updating to 6.0-16.20 (bsc#963937)
- CVE-2015-5041: Could could have invoked non-public interface methods under certain circumstances
- CVE-2015-7575: The TLS protocol could allow weaker than expected security caused by a collision attack when using the MD5 hash function for signing a ServerKeyExchange message during a TLS handshake. An attacker could exploit this vulnerability using man-in-the-middle techniques to impersonate a TLS server and obtain credentials
- CVE-2015-7981: libpng could allow a remote attacker to obtain sensitive information, caused by an out-of-bounds read in the png_convert_to_rfc1123 function. An attacker could exploit this vulnerability to obtain sensitive information
- CVE-2015-8126: buffer overflow in libpng caused by improper bounds checking by the png_set_PLTE() and png_get_PLTE() functions
- CVE-2015-8472: buffer overflow in libpng caused by improper bounds checking by the png_set_PLTE() and png_get_PLTE() functions
- CVE-2015-8540: libpng is vulnerable to a buffer overflow, caused by a read underflow in png_check_keyword in pngwutil.c. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.
- CVE-2016-0402: An unspecified vulnerability related to the Networking component has no confidentiality impact, partial integrity impact, and no availability impact
- CVE-2016-0448: An unspecified vulnerability related to the JMX component could allow a remote attacker to obtain sensitive information
- CVE-2016-0466: An unspecified vulnerability related to the JAXP component could allow a remote attacker to cause a denial of service
- CVE-2016-0483: An unspecified vulnerability related to the AWT component has complete confidentiality impact, complete integrity impact, and complete availability impact
- CVE-2016-0494: An unspecified vulnerability related to the 2D component has complete confidentiality impact, complete integrity impact, and complete availability impact
The following bugs were fixed:
- bsc#960402: resolve package conflicts in devel package
- bsc#960286: resolve package conflicts in the fonts subpackage
- Record
SUSE-SU-2016:0431-1- Updated
- 2026-11-02
OSVSUSE-SU-2016:0433-1 No score
Security update for java-1_7_0-ibm
This update for java-1_7_0-ibm fixes the following issues by updating to 7.0-9.30 (bsc#963937):
- CVE-2015-5041: Could could have invoked non-public interface methods under certain circumstances
- CVE-2015-7575: The TLS protocol could allow weaker than expected security caused by a collision attack when using the MD5 hash function for signing a ServerKeyExchange message during a TLS handshake. An attacker could exploit this vulnerability using man-in-the-middle techniques to impersonate a TLS server and obtain credentials
- CVE-2015-7981: libpng could allow a remote attacker to obtain sensitive information, caused by an out-of-bounds read in the png_convert_to_rfc1123 function. An attacker could exploit this vulnerability to obtain sensitive information
- CVE-2015-8126: buffer overflow in libpng caused by improper bounds checking by the png_set_PLTE() and png_get_PLTE() functions
- CVE-2015-8472: buffer overflow in libpng caused by improper bounds checking by the png_set_PLTE() and png_get_PLTE() functions
- CVE-2015-8540: libpng is vulnerable to a buffer overflow, caused by a read underflow in png_check_keyword in pngwutil.c. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.
- CVE-2016-0402: An unspecified vulnerability related to the Networking component has no confidentiality impact, partial integrity impact, and no availability impact
- CVE-2016-0448: An unspecified vulnerability related to the JMX component could allow a remote attacker to obtain sensitive information
- CVE-2016-0466: An unspecified vulnerability related to the JAXP component could allow a remote attacker to cause a denial of service
- CVE-2016-0483: An unspecified vulnerability related to the AWT component has complete confidentiality impact, complete integrity impact, and complete availability impact
- CVE-2016-0494: An unspecified vulnerability related to the 2D component has complete confidentiality impact, complete integrity impact, and complete availability impact
The following bugs were fixed:
- bsc#960402: resolve package conflicts in devel package
- Record
SUSE-SU-2016:0433-1- Updated
- 2026-11-02
OSVSUSE-SU-2016:0636-1 No score
Security update for java-1_7_0-ibm
This update for java-1_7_0-ibm fixes the following issues by updating to 7.0-9.30 (bsc#963937):
- CVE-2015-5041: Could could have invoked non-public interface methods under certain circumstances
- CVE-2015-7575: The TLS protocol could allow weaker than expected security caused by a collision attack when using the MD5 hash function for signing a ServerKeyExchange message during a TLS handshake. An attacker could exploit this vulnerability using man-in-the-middle techniques to impersonate a TLS server and obtain credentials
- CVE-2015-7981: libpng could allow a remote attacker to obtain sensitive information, caused by an out-of-bounds read in the png_convert_to_rfc1123 function. An attacker could exploit this vulnerability to obtain sensitive information
- CVE-2015-8126: buffer overflow in libpng caused by improper bounds checking by the png_set_PLTE() and png_get_PLTE() functions
- CVE-2015-8472: buffer overflow in libpng caused by improper bounds checking by the png_set_PLTE() and png_get_PLTE() functions
- CVE-2015-8540: libpng is vulnerable to a buffer overflow, caused by a read underflow in png_check_keyword in pngwutil.c. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.
- CVE-2016-0402: An unspecified vulnerability related to the Networking component has no confidentiality impact, partial integrity impact, and no availability impact
- CVE-2016-0448: An unspecified vulnerability related to the JMX component could allow a remote attacker to obtain sensitive information
- CVE-2016-0466: An unspecified vulnerability related to the JAXP component could allow a remote attacker to cause a denial of service
- CVE-2016-0483: An unspecified vulnerability related to the AWT component has complete confidentiality impact, complete integrity impact, and complete availability impact
- CVE-2016-0494: An unspecified vulnerability related to the 2D component has complete confidentiality impact, complete integrity impact, and complete availability impact
The following bugs were fixed:
- bsc#960402: resolve package conflicts in devel package
- Record
SUSE-SU-2016:0636-1- Updated
- 2026-11-02
OSVSUSE-SU-2016:0770-1 No score
Security update for java-1_6_0-ibm
This update for java-1_6_0-ibm fixes the following issues by updating to 6.0-16.20 (bsc#963937)
- CVE-2015-5041: Could could have invoked non-public interface methods under certain circumstances
- CVE-2015-7575: The TLS protocol could allow weaker than expected security caused by a collision attack when using the MD5 hash function for signing a ServerKeyExchange message during a TLS handshake. An attacker could exploit this vulnerability using man-in-the-middle techniques to impersonate a TLS server and obtain credentials
- CVE-2015-7981: libpng could allow a remote attacker to obtain sensitive information, caused by an out-of-bounds read in the png_convert_to_rfc1123 function. An attacker could exploit this vulnerability to obtain sensitive information
- CVE-2015-8126: buffer overflow in libpng caused by improper bounds checking by the png_set_PLTE() and png_get_PLTE() functions
- CVE-2015-8472: buffer overflow in libpng caused by improper bounds checking by the png_set_PLTE() and png_get_PLTE() functions
- CVE-2015-8540: libpng is vulnerable to a buffer overflow, caused by a read underflow in png_check_keyword in pngwutil.c. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.
- CVE-2016-0402: An unspecified vulnerability related to the Networking component has no confidentiality impact, partial integrity impact, and no availability impact
- CVE-2016-0448: An unspecified vulnerability related to the JMX component could allow a remote attacker to obtain sensitive information
- CVE-2016-0466: An unspecified vulnerability related to the JAXP component could allow a remote attacker to cause a denial of service
- CVE-2016-0483: An unspecified vulnerability related to the AWT component has complete confidentiality impact, complete integrity impact, and complete availability impact
- CVE-2016-0494: An unspecified vulnerability related to the 2D component has complete confidentiality impact, complete integrity impact, and complete availability impact
The following bugs were fixed:
- bsc#960402: resolve package conflicts in devel package
- bsc#960286: resolve package conflicts in the fonts subpackage
- Record
SUSE-SU-2016:0770-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.8.0-ibmRed Hat:rhel_extras:7 |
before 1:1.8.0.2.10-1jpp.1.el7 | 1:1.8.0.2.10-1jpp.1.el7 |
java-1.8.0-ibm-demoRed Hat:rhel_extras:7 |
before 1:1.8.0.2.10-1jpp.1.el7 | 1:1.8.0.2.10-1jpp.1.el7 |
java-1.8.0-ibm-develRed Hat:rhel_extras:7 |
before 1:1.8.0.2.10-1jpp.1.el7 | 1:1.8.0.2.10-1jpp.1.el7 |
java-1.8.0-ibm-jdbcRed Hat:rhel_extras:7 |
before 1:1.8.0.2.10-1jpp.1.el7 | 1:1.8.0.2.10-1jpp.1.el7 |
java-1.8.0-ibm-pluginRed Hat:rhel_extras:7 |
before 1:1.8.0.2.10-1jpp.1.el7 | 1:1.8.0.2.10-1jpp.1.el7 |
java-1.8.0-ibm-srcRed Hat:rhel_extras:7 |
before 1:1.8.0.2.10-1jpp.1.el7 | 1:1.8.0.2.10-1jpp.1.el7 |
java-1.7.1-ibmRed Hat:rhel_extras:6 |
before 1:1.7.1.3.30-1jpp.2.el6_7 | 1:1.7.1.3.30-1jpp.2.el6_7 |
java-1.7.1-ibm-demoRed Hat:rhel_extras:6 |
before 1:1.7.1.3.30-1jpp.2.el6_7 | 1:1.7.1.3.30-1jpp.2.el6_7 |
java-1.7.1-ibm-develRed Hat:rhel_extras:6 |
before 1:1.7.1.3.30-1jpp.2.el6_7 | 1:1.7.1.3.30-1jpp.2.el6_7 |
java-1.7.1-ibm-jdbcRed Hat:rhel_extras:6 |
before 1:1.7.1.3.30-1jpp.2.el6_7 | 1:1.7.1.3.30-1jpp.2.el6_7 |
Show 84 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.7.1-ibm-pluginRed Hat:rhel_extras:6 |
before 1:1.7.1.3.30-1jpp.2.el6_7 | 1:1.7.1.3.30-1jpp.2.el6_7 |
java-1.7.1-ibm-srcRed Hat:rhel_extras:6 |
before 1:1.7.1.3.30-1jpp.2.el6_7 | 1:1.7.1.3.30-1jpp.2.el6_7 |
java-1.7.1-ibmRed Hat:rhel_extras:7 |
before 1:1.7.1.3.30-1jpp.1.el7 | 1:1.7.1.3.30-1jpp.1.el7 |
java-1.7.1-ibm-demoRed Hat:rhel_extras:7 |
before 1:1.7.1.3.30-1jpp.1.el7 | 1:1.7.1.3.30-1jpp.1.el7 |
java-1.7.1-ibm-develRed Hat:rhel_extras:7 |
before 1:1.7.1.3.30-1jpp.1.el7 | 1:1.7.1.3.30-1jpp.1.el7 |
java-1.7.1-ibm-jdbcRed Hat:rhel_extras:7 |
before 1:1.7.1.3.30-1jpp.1.el7 | 1:1.7.1.3.30-1jpp.1.el7 |
java-1.7.1-ibm-pluginRed Hat:rhel_extras:7 |
before 1:1.7.1.3.30-1jpp.1.el7 | 1:1.7.1.3.30-1jpp.1.el7 |
java-1.7.1-ibm-srcRed Hat:rhel_extras:7 |
before 1:1.7.1.3.30-1jpp.1.el7 | 1:1.7.1.3.30-1jpp.1.el7 |
java-1.7.0-ibmRed Hat:rhel_extras:5::client |
before 1:1.7.0.9.30-1jpp.1.el5 | 1:1.7.0.9.30-1jpp.1.el5 |
java-1.7.0-ibm-demoRed Hat:rhel_extras:5::client |
before 1:1.7.0.9.30-1jpp.1.el5 | 1:1.7.0.9.30-1jpp.1.el5 |
java-1.7.0-ibm-develRed Hat:rhel_extras:5::client |
before 1:1.7.0.9.30-1jpp.1.el5 | 1:1.7.0.9.30-1jpp.1.el5 |
java-1.7.0-ibm-jdbcRed Hat:rhel_extras:5::client |
before 1:1.7.0.9.30-1jpp.1.el5 | 1:1.7.0.9.30-1jpp.1.el5 |
java-1.7.0-ibm-pluginRed Hat:rhel_extras:5::client |
before 1:1.7.0.9.30-1jpp.1.el5 | 1:1.7.0.9.30-1jpp.1.el5 |
java-1.7.0-ibm-srcRed Hat:rhel_extras:5::client |
before 1:1.7.0.9.30-1jpp.1.el5 | 1:1.7.0.9.30-1jpp.1.el5 |
java-1.7.0-ibmRed Hat:rhel_extras:5::server |
before 1:1.7.0.9.30-1jpp.1.el5 | 1:1.7.0.9.30-1jpp.1.el5 |
java-1.7.0-ibm-demoRed Hat:rhel_extras:5::server |
before 1:1.7.0.9.30-1jpp.1.el5 | 1:1.7.0.9.30-1jpp.1.el5 |
java-1.7.0-ibm-develRed Hat:rhel_extras:5::server |
before 1:1.7.0.9.30-1jpp.1.el5 | 1:1.7.0.9.30-1jpp.1.el5 |
java-1.7.0-ibm-jdbcRed Hat:rhel_extras:5::server |
before 1:1.7.0.9.30-1jpp.1.el5 | 1:1.7.0.9.30-1jpp.1.el5 |
java-1.7.0-ibm-pluginRed Hat:rhel_extras:5::server |
before 1:1.7.0.9.30-1jpp.1.el5 | 1:1.7.0.9.30-1jpp.1.el5 |
java-1.7.0-ibm-srcRed Hat:rhel_extras:5::server |
before 1:1.7.0.9.30-1jpp.1.el5 | 1:1.7.0.9.30-1jpp.1.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:5::client |
before 1:1.6.0.16.20-1jpp.1.el5 | 1:1.6.0.16.20-1jpp.1.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::client |
before 1:1.6.0.16.20-1jpp.1.el5 | 1:1.6.0.16.20-1jpp.1.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::client |
before 1:1.6.0.16.20-1jpp.1.el5 | 1:1.6.0.16.20-1jpp.1.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::client |
before 1:1.6.0.16.20-1jpp.1.el5 | 1:1.6.0.16.20-1jpp.1.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::client |
before 1:1.6.0.16.20-1jpp.1.el5 | 1:1.6.0.16.20-1jpp.1.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::client |
before 1:1.6.0.16.20-1jpp.1.el5 | 1:1.6.0.16.20-1jpp.1.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::client |
before 1:1.6.0.16.20-1jpp.1.el5 | 1:1.6.0.16.20-1jpp.1.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::client |
before 1:1.6.0.16.20-1jpp.1.el5 | 1:1.6.0.16.20-1jpp.1.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:5::server |
before 1:1.6.0.16.20-1jpp.1.el5 | 1:1.6.0.16.20-1jpp.1.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::server |
before 1:1.6.0.16.20-1jpp.1.el5 | 1:1.6.0.16.20-1jpp.1.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::server |
before 1:1.6.0.16.20-1jpp.1.el5 | 1:1.6.0.16.20-1jpp.1.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::server |
before 1:1.6.0.16.20-1jpp.1.el5 | 1:1.6.0.16.20-1jpp.1.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::server |
before 1:1.6.0.16.20-1jpp.1.el5 | 1:1.6.0.16.20-1jpp.1.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::server |
before 1:1.6.0.16.20-1jpp.1.el5 | 1:1.6.0.16.20-1jpp.1.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::server |
before 1:1.6.0.16.20-1jpp.1.el5 | 1:1.6.0.16.20-1jpp.1.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::server |
before 1:1.6.0.16.20-1jpp.1.el5 | 1:1.6.0.16.20-1jpp.1.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:6 |
before 1:1.6.0.16.20-1jpp.1.el6_7 | 1:1.6.0.16.20-1jpp.1.el6_7 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:6 |
before 1:1.6.0.16.20-1jpp.1.el6_7 | 1:1.6.0.16.20-1jpp.1.el6_7 |
java-1.6.0-ibm-develRed Hat:rhel_extras:6 |
before 1:1.6.0.16.20-1jpp.1.el6_7 | 1:1.6.0.16.20-1jpp.1.el6_7 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:6 |
before 1:1.6.0.16.20-1jpp.1.el6_7 | 1:1.6.0.16.20-1jpp.1.el6_7 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:6 |
before 1:1.6.0.16.20-1jpp.1.el6_7 | 1:1.6.0.16.20-1jpp.1.el6_7 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:6 |
before 1:1.6.0.16.20-1jpp.1.el6_7 | 1:1.6.0.16.20-1jpp.1.el6_7 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:6 |
before 1:1.6.0.16.20-1jpp.1.el6_7 | 1:1.6.0.16.20-1jpp.1.el6_7 |
java-1.7.0-ibmRed Hat:network_satellite:5.6::el5 |
before 1:1.7.0.9.40-1jpp.1.el5 | 1:1.7.0.9.40-1jpp.1.el5 |
java-1.7.0-ibm-develRed Hat:network_satellite:5.6::el5 |
before 1:1.7.0.9.40-1jpp.1.el5 | 1:1.7.0.9.40-1jpp.1.el5 |
spacewalk-javaRed Hat:network_satellite:5.6::el5 |
before 0:2.0.2-109.el5sat | 0:2.0.2-109.el5sat |
spacewalk-java-configRed Hat:network_satellite:5.6::el5 |
before 0:2.0.2-109.el5sat | 0:2.0.2-109.el5sat |
spacewalk-java-libRed Hat:network_satellite:5.6::el5 |
before 0:2.0.2-109.el5sat | 0:2.0.2-109.el5sat |
spacewalk-java-oracleRed Hat:network_satellite:5.6::el5 |
before 0:2.0.2-109.el5sat | 0:2.0.2-109.el5sat |
spacewalk-java-postgresqlRed Hat:network_satellite:5.6::el5 |
before 0:2.0.2-109.el5sat | 0:2.0.2-109.el5sat |
spacewalk-taskomaticRed Hat:network_satellite:5.6::el5 |
before 0:2.0.2-109.el5sat | 0:2.0.2-109.el5sat |
java-1.7.1-ibmRed Hat:network_satellite:5.6::el6 |
before 1:1.7.1.3.40-1jpp.1.el6_7 | 1:1.7.1.3.40-1jpp.1.el6_7 |
java-1.7.1-ibm-develRed Hat:network_satellite:5.6::el6 |
before 1:1.7.1.3.40-1jpp.1.el6_7 | 1:1.7.1.3.40-1jpp.1.el6_7 |
spacewalk-javaRed Hat:network_satellite:5.6::el6 |
before 0:2.0.2-109.el6sat | 0:2.0.2-109.el6sat |
spacewalk-java-configRed Hat:network_satellite:5.6::el6 |
before 0:2.0.2-109.el6sat | 0:2.0.2-109.el6sat |
spacewalk-java-libRed Hat:network_satellite:5.6::el6 |
before 0:2.0.2-109.el6sat | 0:2.0.2-109.el6sat |
spacewalk-java-oracleRed Hat:network_satellite:5.6::el6 |
before 0:2.0.2-109.el6sat | 0:2.0.2-109.el6sat |
spacewalk-java-postgresqlRed Hat:network_satellite:5.6::el6 |
before 0:2.0.2-109.el6sat | 0:2.0.2-109.el6sat |
spacewalk-taskomaticRed Hat:network_satellite:5.6::el6 |
before 0:2.0.2-109.el6sat | 0:2.0.2-109.el6sat |
java-1.7.1-ibmRed Hat:network_satellite:5.7::el6 |
before 1:1.7.1.3.40-1jpp.1.el6_7 | 1:1.7.1.3.40-1jpp.1.el6_7 |
java-1.7.1-ibm-develRed Hat:network_satellite:5.7::el6 |
before 1:1.7.1.3.40-1jpp.1.el6_7 | 1:1.7.1.3.40-1jpp.1.el6_7 |
spacewalk-javaRed Hat:network_satellite:5.7::el6 |
before 0:2.3.8-146.el6sat | 0:2.3.8-146.el6sat |
spacewalk-java-configRed Hat:network_satellite:5.7::el6 |
before 0:2.3.8-146.el6sat | 0:2.3.8-146.el6sat |
spacewalk-java-libRed Hat:network_satellite:5.7::el6 |
before 0:2.3.8-146.el6sat | 0:2.3.8-146.el6sat |
spacewalk-java-oracleRed Hat:network_satellite:5.7::el6 |
before 0:2.3.8-146.el6sat | 0:2.3.8-146.el6sat |
spacewalk-java-postgresqlRed Hat:network_satellite:5.7::el6 |
before 0:2.3.8-146.el6sat | 0:2.3.8-146.el6sat |
spacewalk-taskomaticRed Hat:network_satellite:5.7::el6 |
before 0:2.3.8-146.el6sat | 0:2.3.8-146.el6sat |
java-1_8_0-ibmSUSE:Linux Enterprise Software Development Kit 12 SP1 |
before 1.8.0_sr2.10-7.1 | 1.8.0_sr2.10-7.1 |
java-1_8_0-ibmSUSE:Linux Enterprise Server 12 SP1 |
before 1.8.0_sr2.10-7.1 | 1.8.0_sr2.10-7.1 |
java-1_8_0-ibmSUSE:Linux Enterprise Server for SAP Applications 12 SP1 |
before 1.8.0_sr2.10-7.1 | 1.8.0_sr2.10-7.1 |
java-1_7_1-ibmSUSE:Linux Enterprise Software Development Kit 11 SP4 |
before 1.7.1_sr3.30-9.1 | 1.7.1_sr3.30-9.1 |
java-1_7_1-ibmSUSE:Linux Enterprise Server 11 SP4 |
before 1.7.1_sr3.30-9.1 | 1.7.1_sr3.30-9.1 |
java-1_7_1-ibmSUSE:Linux Enterprise Server for SAP Applications 11 SP4 |
before 1.7.1_sr3.30-9.1 | 1.7.1_sr3.30-9.1 |
java-1_7_1-ibmSUSE:Linux Enterprise Software Development Kit 12 |
before 1.7.1_sr3.30-21.1 | 1.7.1_sr3.30-21.1 |
java-1_7_1-ibmSUSE:Linux Enterprise Software Development Kit 12 SP1 |
before 1.7.1_sr3.30-21.1 | 1.7.1_sr3.30-21.1 |
java-1_7_1-ibmSUSE:Linux Enterprise Server 12 |
before 1.7.1_sr3.30-21.1 | 1.7.1_sr3.30-21.1 |
java-1_7_1-ibmSUSE:Linux Enterprise Server for SAP Applications 12 |
before 1.7.1_sr3.30-21.1 | 1.7.1_sr3.30-21.1 |
java-1_7_1-ibmSUSE:Linux Enterprise Server 12 SP1 |
before 1.7.1_sr3.30-21.1 | 1.7.1_sr3.30-21.1 |
java-1_7_1-ibmSUSE:Linux Enterprise Server for SAP Applications 12 SP1 |
before 1.7.1_sr3.30-21.1 | 1.7.1_sr3.30-21.1 |
java-1_6_0-ibmSUSE:Linux Enterprise Module for Legacy 12 |
before 1.6.0_sr16.20-30.1 | 1.6.0_sr16.20-30.1 |
java-1_6_0-ibmSUSE:Linux Enterprise Server 11 SP2-LTSS |
before 1.6.0_sr16.20-49.1 | 1.6.0_sr16.20-49.1 |
java-1_7_0-ibmSUSE:Linux Enterprise Server 11 SP2-LTSS |
before 1.7.0_sr9.30-45.1 | 1.7.0_sr9.30-45.1 |
java-1_7_0-ibmSUSE:Linux Enterprise Server 11 SP3-LTSS |
before 1.7.0_sr9.30-47.1 | 1.7.0_sr9.30-47.1 |
java-1_6_0-ibmSUSE:Linux Enterprise Server 11 SP3-LTSS |
before 1.6.0_sr16.20-51.1 | 1.6.0_sr16.20-51.1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
lists.opensuse.org/opensuse-security-announce/2016-02/msg00028.html
www-01.ibm.com/support/docview.wss?uid=swg1IV72872
access.redhat.com/errata/RHSA-2016:1430
Show 194 moreShow less
securityfocus.com/bid/82451
nvd.nist.gov/vuln/detail/CVE-2015-5041
github.com/advisories/GHSA-7v4m-8wwx-8xgc
ibm.com/developerworks/java/jdk/alerts
bugzilla.redhat.com/show_bug.cgi?id=1281756
security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0098.json
cve.org/CVERecord?id=CVE-2015-5041
mitls.org/pages/attacks/SLOTH
mozilla.org/en-US/security/advisories/mfsa2015-150
oracle.com/technetwork/topics/security/cpujan2016-2367955.html
cisa.gov/known-exploited-vulnerabilities-catalog
suse.com/support/update/announcement/2016/suse-su-20160390-1
bugzilla.suse.com/960402
This page doesn't list everything
Left out here: 15 references. The JSON record has them.