CVE-2015-4843: Integer Overflow
Multiple integer overflow issues were found in the implementation of Buffers in the java.nio (Non-blocking I/O) packages in the Libraries component of OpenJDK. These could lead to out of bounds buffer access and Java Virtual Machine memory corruption. An untursted Java application or applet could use these flaws to run arbitrary code with the Java Virtual Machine privileges or bypass Java sandbox restrictions.
Other sources
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
— MITRE
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-4843?
CVE-2015-4843 is considered a high severity vulnerability due to its potential to cause out-of-bounds buffer access and memory corruption.
How do I fix CVE-2015-4843?
To fix CVE-2015-4843, you should update to a patched version of Oracle JDK or JRE that addresses the integer overflow issues.
Which versions of software are affected by CVE-2015-4843?
CVE-2015-4843 affects Oracle JDK versions 1.6.0-update101, 1.7.0-update85, and 1.8.0-update60 and 1.8.0-update51, as well as corresponding JRE versions.
What are the potential impacts of CVE-2015-4843?
The potential impacts of CVE-2015-4843 include increased risk of exploitation by untrusted Java applications leading to memory corruption.
Is CVE-2015-4843 a remote exploit?
CVE-2015-4843 can be exploited by malicious Java applications or applets, making it possible for attackers to execute code remotely.