REDHAT-BUG-1327743: Openjdk vulnerability

Published Apr 15, 2016

Updated

It was discovered that the ObjectInputStream class in the Serialization component of OpenJDK failed to properly ensure thread consistency when deserializing serialized input. An untrusted Java application or applet could use this flaw to bypass Java sandbox restrictions.

Affected Software

1 affected component

OpenJDK OpenJDK

Event History

Apr 15, 2016

Data Sourced

via Red Hat·07:26 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1327743?

The severity of REDHAT-BUG-1327743 is considered to be high due to the potential for untrusted applications to bypass Java sandbox restrictions.

How do I fix REDHAT-BUG-1327743?

To fix REDHAT-BUG-1327743, you should update to the latest patched version of OpenJDK provided by your vendor.

What impact could REDHAT-BUG-1327743 have on my system?

REDHAT-BUG-1327743 could allow malicious Java applications to escape sandbox environments, potentially leading to unauthorized system access.

Is REDHAT-BUG-1327743 specific to any version of OpenJDK?

Yes, REDHAT-BUG-1327743 affects certain versions of OpenJDK, so checking your specific version is crucial.

How can I determine if my system is affected by REDHAT-BUG-1327743?

You can determine if your system is affected by REDHAT-BUG-1327743 by checking the OpenJDK version you are currently running.