Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Rational Business Developer (CVE-2016-0264)

Summary

There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 7 and 8 that is used by Rational Business Developer. These issues were disclosed as part of the IBM Java SDK updates in April 2016.

Vulnerability Details

CVEID: CVE-2016-0264 DESCRIPTION: A buffer overflow vulnerability in the IBM JVM facilitates arbitrary code execution under certain limited circumstances.
CVSS Base Score: 5.6
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/110867 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L)

Affected Products and Versions

Rational Business Developer 8.5 - 9.5

Remediation/Fixes

Product

| VRMF| APAR| Remediation/First Fix
—|—|—|—
Rational Business Developer| 8.5.x, 9.0.x, 9.1.x，9.5.x| None| Rational-RBD-Java7SR9FP40-ifix
Rational-RBD-Java8SR3-ifix

Workarounds and Mitigations

None