- Vulnerability/
- REDHAT-BUG-1327743
REDHAT-BUG-1327743
First published: Fri Apr 15 2016(Updated: )
It was discovered that the ObjectInputStream class in the Serialization component of OpenJDK failed to properly ensure thread consistency when deserializing serialized input. An untrusted Java application or applet could use this flaw to bypass Java sandbox restrictions.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| OpenJDK |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.oracle.com/technetwork/topics/security/cpuapr2016-2881694.html#AppendixJAVA
- https://rhn.redhat.com/errata/RHSA-2016-0651.html
- https://rhn.redhat.com/errata/RHSA-2016-0650.html
- https://rhn.redhat.com/errata/RHSA-2016-0676.html
- https://rhn.redhat.com/errata/RHSA-2016-0677.html
- https://rhn.redhat.com/errata/RHSA-2016-0675.html
- https://rhn.redhat.com/errata/RHSA-2016-0679.html
- https://rhn.redhat.com/errata/RHSA-2016-0678.html
- http://hg.openjdk.java.net/jdk8u/jdk8u/jdk/rev/4138b3f27ffe
- https://rhn.redhat.com/errata/RHSA-2016-0701.html
- https://rhn.redhat.com/errata/RHSA-2016-0702.html
- https://rhn.redhat.com/errata/RHSA-2016-0708.html
- https://rhn.redhat.com/errata/RHSA-2016-0716.html
- https://rhn.redhat.com/errata/RHSA-2016-0723.html
- https://rhn.redhat.com/errata/RHSA-2016-1039.html
- https://access.redhat.com/errata/RHSA-2016:1430
- https://access.redhat.com/errata/RHSA-2017:1216
- https://bugzilla.redhat.com/show_bug.cgi?id=1327743
Frequently Asked Questions
What is the severity of REDHAT-BUG-1327743?
The severity of REDHAT-BUG-1327743 is considered to be high due to the potential for untrusted applications to bypass Java sandbox restrictions.
How do I fix REDHAT-BUG-1327743?
To fix REDHAT-BUG-1327743, you should update to the latest patched version of OpenJDK provided by your vendor.
What impact could REDHAT-BUG-1327743 have on my system?
REDHAT-BUG-1327743 could allow malicious Java applications to escape sandbox environments, potentially leading to unauthorized system access.
Is REDHAT-BUG-1327743 specific to any version of OpenJDK?
Yes, REDHAT-BUG-1327743 affects certain versions of OpenJDK, so checking your specific version is crucial.
How can I determine if my system is affected by REDHAT-BUG-1327743?
You can determine if your system is affected by REDHAT-BUG-1327743 by checking the OpenJDK version you are currently running.
- agent/references
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2016-0686
- agent/source
- agent/severity
- agent/description
- agent/event
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/openjdk
- canonical/openjdk