REDHAT-BUG-1413882: Medium severity openjdk vulnerability

Published Jan 17, 2017

Updated

It was discovered that the URLStreamHandler class in the Networking component of OpenJDK failed to properly parse user info from the URL. A remote attacker could cause Java application to incorrectly parse attacker provided URL and interpret it differently from other applications processing the same URL.

Affected Software

1 affected component

OpenJDK OpenJDK

Event History

Jan 17, 2017

Data Sourced

via Red Hat·08:58 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1413882?

The severity of REDHAT-BUG-1413882 is considered high due to the potential for remote exploitation.

How do I fix REDHAT-BUG-1413882?

To fix REDHAT-BUG-1413882, update your OpenJDK installation to the latest patched version.

What type of attack is possible with REDHAT-BUG-1413882?

A remote attacker could exploit REDHAT-BUG-1413882 to cause a Java application to incorrectly parse URLs.

Which versions of OpenJDK are affected by REDHAT-BUG-1413882?

REDHAT-BUG-1413882 affects multiple versions of OpenJDK, specifically any version prior to the security patch.

Is REDHAT-BUG-1413882 related to a specific component of OpenJDK?

Yes, REDHAT-BUG-1413882 is related to the URLStreamHandler class in the Networking component of OpenJDK.