REDHAT-BUG-1273637: Medium severity openjdk 8 vulnerability

Published Oct 20, 2015

Updated

It was discovered that the JAXP component of OpenJDK did not use efficient data structures to store data from parsed XML documents. A specially-crafted XML input could cause a Java application using JAXP to use an excessive amount of CPU time by e.g. triggering hash collisions.

Affected Software

1 affected component

ORACLE OpenJDK

Event History

Oct 20, 2015

Data Sourced

via Red Hat·08:32 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What conditions are required for exploitation?

An attacker needs to cause a Java application that uses JAXP to parse a specially crafted XML document. The crafted input can trigger hash collisions and excessive CPU consumption.

Who is most exposed to this issue?

Java applications using the JAXP component of OpenJDK are affected when they parse XML input that an attacker can influence or supply.

What is the practical impact of a successful attack?

Successful exploitation can cause excessive CPU usage, potentially reducing availability of the affected Java application.

REDHAT-BUG-1273637: Medium severity openjdk 8 vulnerability

Affected Software

Event History

Frequently Asked Questions

What conditions are required for exploitation?

Who is most exposed to this issue?

What is the practical impact of a successful attack?

Company

Resources

Contact

Frequently Asked Questions

What conditions are required for exploitation?

Who is most exposed to this issue?

What is the practical impact of a successful attack?