IBM AIX Java Denial of Service Vulnerability漏洞银行丨0DAY BANK

There are multiple vulnerabilities in IBM SDK Java Technology Edition, Versions 6, 7, 7.1, 8 that are used by AIX.

AIX is prone to the following vulnerabilities:

An unspecified vulnerability in Oracle Java SE and Java SE Embedded related to the Libraries component has high confidentiality impact, high integrity impact, and high availability impact.
An unspecified vulnerability in Oracle Java SE related to the Deployment component has high confidentiality impact, high integrity impact, and high availability impact.
An unspecified vulnerability in Oracle Java SE and Java SE Embedded related to the Networking component has no confidentiality impact, low integrity impact, and no availability impact.

Affected Platforms:
AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2

Note:The detection requires root privileges to run "emgr -c" to check for patches. In absence of such privileges, the detection may not output actual results.

Successful exploitation allows remote attackers to cause a denial of service via a malformed packet to the rndc (aka control channel) interface, related to alist.c and sexpr.c.

The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory to obtain more information

Patch:
Following are links for downloading patches to fix the vulnerabilities:

java_july2016_advisory: AIX 5.3, 6.1, 7.1, 7.2