REDHAT-BUG-1357494: Medium severity OpenJDK OpenJDK vulnerability

Published Jul 18, 2016

Updated

It was discovered that the CORBA component of OpenJDK did not sufficiently restrict the use of custom ValueHandler when performing object deserialization. An untrusted Java application or applet could use this flaw to bypass certain Java sandbox restrictions.

Affected Software

1 affected component

OpenJDK OpenJDK

Event History

Jul 18, 2016

Data Sourced

via Red Hat·11:40 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1357494?

REDHAT-BUG-1357494 is classified as a moderate severity vulnerability due to its potential to bypass Java sandbox restrictions.

How do I fix REDHAT-BUG-1357494?

To fix REDHAT-BUG-1357494, update your OpenJDK to the latest patched version that addresses this vulnerability.

What systems are affected by REDHAT-BUG-1357494?

REDHAT-BUG-1357494 affects OpenJDK installations that utilize the CORBA component for object deserialization.

What can an attacker do with REDHAT-BUG-1357494?

An attacker could exploit REDHAT-BUG-1357494 by using an untrusted Java application to bypass certain security restrictions.

Is REDHAT-BUG-1357494 specific to certain OpenJDK versions?

Yes, REDHAT-BUG-1357494 impacts specific versions of OpenJDK that include the vulnerable CORBA component.