REDHAT-BUG-1471888: Medium severity openjdk vulnerability

Published Jul 17, 2017

Updated

It was discovered that the implementation of the BasicAttribute class in OpenJDK did not limit the amount of memory allocated when creating object instance from a serialized form. A specially-crafted serialized input stream could cause JVM to consume an excessive amount of memory.

Affected Software

1 affected component

OpenJDK OpenJDK

Event History

Jul 17, 2017

Data Sourced

via Red Hat·03:07 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1471888?

The severity of REDHAT-BUG-1471888 is high due to its potential for excessive memory consumption.

How do I fix REDHAT-BUG-1471888?

To fix REDHAT-BUG-1471888, update to the latest patched version of OpenJDK that resolves this memory allocation issue.

What systems are affected by REDHAT-BUG-1471888?

REDHAT-BUG-1471888 affects systems running OpenJDK with vulnerabilities in the BasicAttribute class.

What potential risks does REDHAT-BUG-1471888 pose?

The risks of REDHAT-BUG-1471888 include application crashes and denial of service caused by excessive memory usage.

Is there a workaround for REDHAT-BUG-1471888?

Currently, there is no documented workaround for REDHAT-BUG-1471888, making updates the recommended course of action.