REDHAT-BUG-1357506: Integer Overflow
First published: Mon Jul 18 2016(Updated: )
Integer overflow flaws were found in the way the Hotspot component of OpenJDK read bytecode from class files. An untrusted Java application or applet could use this flaw to bypass certain Java sandbox restrictions.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Build of OpenJDK with Hotspot |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html#AppendixJAVA
- http://hg.openjdk.java.net/jdk8u/jdk8u/hotspot/rev/9edc175ff3e6
- https://access.redhat.com/errata/RHSA-2016:1458
- https://access.redhat.com/errata/RHSA-2016:1477
- https://access.redhat.com/errata/RHSA-2016:1476
- https://access.redhat.com/errata/RHSA-2016:1475
- https://rhn.redhat.com/errata/RHSA-2016-1504.html
- https://rhn.redhat.com/errata/RHSA-2016-1776.html
- https://bugzilla.redhat.com/show_bug.cgi?id=1357506
Frequently Asked Questions
What is the severity of REDHAT-BUG-1357506?
The severity of REDHAT-BUG-1357506 is rated as critical due to the potential for bypassing Java sandbox restrictions.
How do I fix REDHAT-BUG-1357506?
To fix REDHAT-BUG-1357506, you should update the OpenJDK Hotspot to the latest patched version.
What causes the vulnerability REDHAT-BUG-1357506?
The vulnerability REDHAT-BUG-1357506 is caused by integer overflow flaws in the Hotspot component of OpenJDK when reading bytecode.
What impact does REDHAT-BUG-1357506 have on security?
REDHAT-BUG-1357506 can allow untrusted Java applications or applets to bypass certain security restrictions, posing a security risk.
Which versions of OpenJDK are affected by REDHAT-BUG-1357506?
All versions of OpenJDK Hotspot that contain the integer overflow vulnerability are affected by REDHAT-BUG-1357506.
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2016-3550
- agent/severity
- agent/weakness
- agent/references
- agent/description
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/openjdk
- canonical/microsoft build of openjdk with hotspot