REDHAT-BUG-1356987: Microsoft build of openjdk with hotspot vulnerability

Published Jul 15, 2016

Updated

It was discovered that the Hotspot component of OpenJDK did not properly restrict access to the invokeBasic() method of the MethodHandle class. An untrusted Java application or applet could use this flaw to bypass Java sandbox restrictions.

Affected Software

1 affected component

OpenJDK Hotspot

Event History

Jul 15, 2016

Data Sourced

via Red Hat·12:34 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1356987?

The severity of REDHAT-BUG-1356987 is classified as critical due to the potential bypass of Java sandbox restrictions.

How do I fix REDHAT-BUG-1356987?

To fix REDHAT-BUG-1356987, you should upgrade to the latest version of OpenJDK that includes the necessary patches.

Who is affected by REDHAT-BUG-1356987?

Anyone using the OpenJDK Hotspot component is potentially affected by REDHAT-BUG-1356987.

What type of exploit is associated with REDHAT-BUG-1356987?

REDHAT-BUG-1356987 can be exploited by an untrusted Java application or applet to bypass Java sandbox restrictions.

What components are involved in the vulnerability identified by REDHAT-BUG-1356987?

The component involved in REDHAT-BUG-1356987 is the Hotspot component of OpenJDK.