REDHAT-BUG-1471535: High severity openjdk vulnerability

Published Jul 16, 2017

Updated

It was discovered that the JAR (Java ARchive) verifier in the Security component of OpenJDK did not correctly handle files inside archives with missing digest. An attacker could possibly use this flaw to manipulate content of a singed JAR, bypassing intended verification.

Affected Software

1 affected component

OpenJDK OpenJDK

Event History

Jul 16, 2017

Data Sourced

via Red Hat·06:11 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1471535?

The severity of REDHAT-BUG-1471535 is classified as high due to its potential to allow content manipulation of signed JAR files.

How do I fix REDHAT-BUG-1471535?

To fix REDHAT-BUG-1471535, update to the latest version of OpenJDK that contains the security patch addressing this vulnerability.

What is the impact of REDHAT-BUG-1471535?

The impact of REDHAT-BUG-1471535 allows attackers to bypass intended verification of signed JAR files, potentially leading to malicious code execution.

Which software is affected by REDHAT-BUG-1471535?

REDHAT-BUG-1471535 affects the OpenJDK security component, specifically during the verification of JAR files.

Can I mitigate REDHAT-BUG-1471535 without updating OpenJDK?

Mitigating REDHAT-BUG-1471535 without updating OpenJDK is challenging; the best practice is to apply the necessary updates as they are released.