Vulnerability record · CVE-2016-0376 · published 3 June 2016

CVE-2016-0376: Novell suse linux enterprise software development kit vulnerability

Novell · Suse Linux Enterprise Software Development Kit

The com.ibm.rmi.io.SunSerializableFactory class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40 (7.1.3.40), and 8 before SR3 (8.0.3.0) does not properly deserialize classes in an AccessController doPrivileged block, which allows remote attackers to bypass a sandbox protection mechanism and execute arbitrary code as demonstrated by the readValue method of the com.ibm.rmi.io.ValueHandlerPool.ValueHandlerSingleton class, which implements the javax.rmi.CORBA.ValueHandler interface. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-5456.

8.1 CVSS 3.0 High EPSS 5.7% · top 7.3%

8.1CVSS 3.0 base score, v2 5.1

5.7%EPSS exploitation probability, 30 days

NoNot in CISA KEV

13Affected product versions listed by NVD

44References

17 Jun 2026Last modified by NVD

Description

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

13 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Java Sdk Ibm

Suse Linux Enterprise Module For Legacy Software Novell

Suse Linux Enterprise Server Novell

Suse Linux Enterprise Software Development Kit Novell

Suse Manager Novell

Suse Manager Proxy Novell

Suse Openstack Cloud Novell

Enterprise Linux Desktop Redhat

Enterprise Linux Hpc Node Supplementary Redhat

Enterprise Linux Server Redhat

Enterprise Linux Server Eus Redhat

Enterprise Linux Workstation Redhat

Satellite Redhat

References

Link	Tags
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00039.html	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00040.html	Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00042.html	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00058.html	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00059.html	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00061.html	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00067.html	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00002.html	Mailing ListThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-0701.html	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-0702.html	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-0708.html	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-0716.html	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-1039.html	Third Party Advisory
http://seclists.org/fulldisclosure/2016/Apr/43	Mailing ListThird Party AdvisoryVDB Entry
http://www-01.ibm.com/support/docview.wss?uid=swg1IX90171	Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21980826	Vendor Advisory
http://www.security-explorations.com/materials/SE-2012-01-IBM-5.pdf	Third Party AdvisoryVDB Entry
http://www.securityfocus.com/archive/1/538066/100/100/threaded	Third Party AdvisoryVDB Entry
http://www.securityfocus.com/bid/89192	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1035953	Third Party AdvisoryVDB Entry
https://access.redhat.com/errata/RHSA-2016:1430	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:1216	Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00039.html	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00040.html	Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00042.html	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00058.html	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00059.html	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00061.html	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00067.html	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00002.html	Mailing ListThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-0701.html	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-0702.html	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-0708.html	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-0716.html	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-1039.html	Third Party Advisory
http://seclists.org/fulldisclosure/2016/Apr/43	Mailing ListThird Party AdvisoryVDB Entry
http://www-01.ibm.com/support/docview.wss?uid=swg1IX90171	Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21980826	Vendor Advisory
http://www.security-explorations.com/materials/SE-2012-01-IBM-5.pdf	Third Party AdvisoryVDB Entry
http://www.securityfocus.com/archive/1/538066/100/100/threaded	Third Party AdvisoryVDB Entry

Track CVE-2016-0376 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2015-2740Mozilla thunderbird memory buffer overflow vulnerabilityBuffer overflow in the nsXMLHttpRequest::AppendToResponseText function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 3…EPSS 5.6%6 Jul 2015 10.0CVE-2015-2739Mozilla firefox memory buffer overflow vulnerabilityThe ArrayBufferBuilder::append function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.…EPSS 2.7%6 Jul 2015 10.0CVE-2015-2733Mozilla firefox vulnerabilityUse-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x be…EPSS 6.2%6 Jul 2015 10.0CVE-2015-2726Oracle solaris memory buffer overflow vulnerabilityMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0 allow remote attackers to cause a denial of service (memory…EPSS 6.1%6 Jul 2015 10.0CVE-2015-2725Novell suse linux enterprise software development kit memory buffer overflow vulnerabilityMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 …EPSS 6.1%6 Jul 2015 10.0CVE-2015-2724Oracle solaris memory buffer overflow vulnerabilityMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thu…EPSS 5.9%6 Jul 2015 10.0CVE-2015-2722Oracle solaris vulnerabilityUse-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x be…EPSS 6.2%6 Jul 2015 10.0CVE-2014-8891Ibm java sdk vulnerabilityUnspecified vulnerability in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 5.0 before SR16-FP9, 6 before SR16-FP3, 6R1 before SR…EPSS 7.2%6 Mar 2015

Source: NIST National Vulnerability Database (record CVE-2016-0376), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.