REDHAT-BUG-1385544: High severity openjdk 8 vulnerability

Published Oct 17, 2016

Updated

It was discovered that the Hotspot component of OpenJDK did not properly check Java Debug Wire Protocol (JDWP) packets, which could possibly allow HTTP requests issues by a web browser to be interpreted as valid JDWP messages. An attacker could possibly use this flaw to send debugging commands to a Java program or applet running with debugging enabled if they could make victim's browser send HTTP requests to the JDWP port of the debugged application.

Affected Software

1 affected component

ORACLE OpenJDK

Event History

Oct 17, 2016

Data Sourced

via Red Hat·09:59 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1385544?

The severity of REDHAT-BUG-1385544 is considered critical due to its potential to allow remote code execution through improper handling of JDWP packets.

How do I fix REDHAT-BUG-1385544?

To fix REDHAT-BUG-1385544, apply the latest security patches provided for OpenJDK 17 from Oracle.

Who is affected by REDHAT-BUG-1385544?

REDHAT-BUG-1385544 affects users of Oracle OpenJDK, particularly version 17.

What exploits are possible with REDHAT-BUG-1385544?

Exploiting REDHAT-BUG-1385544 could allow attackers to send unauthorized debugging commands to the Java application.

When was REDHAT-BUG-1385544 disclosed?

REDHAT-BUG-1385544 was disclosed in 2016 and is related to vulnerabilities found in older versions of OpenJDK.