REDHAT-BUG-1328040: Medium severity OpenJDK JAXP vulnerability

Published Apr 18, 2016

Updated

It was discovered that the JAXP (Java API for XML Processing) component of OpenJDK failed to properly handle Unicode surrogate pairs used as part of the XML attribute values. A specially-crafted XML input could cause a Java application to use an excessive amount of memory when parsed.

Affected Software

1 affected component

OpenJDK JAXP

Event History

Apr 18, 2016

Data Sourced

09:46 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1328040?

The severity of REDHAT-BUG-1328040 is classified as moderate due to the potential for memory exhaustion.

How do I fix REDHAT-BUG-1328040?

To fix REDHAT-BUG-1328040, update the OpenJDK JAXP component to the latest version provided by your system's package manager.

What vulnerability does REDHAT-BUG-1328040 address?

REDHAT-BUG-1328040 addresses a vulnerability in the JAXP component of OpenJDK that improperly handles Unicode surrogate pairs in XML input.

Which software is affected by REDHAT-BUG-1328040?

REDHAT-BUG-1328040 affects the OpenJDK JAXP component.

How can REDHAT-BUG-1328040 impact my application?

REDHAT-BUG-1328040 can lead to excessive memory consumption in Java applications when processing specially-crafted XML input.