REDHAT-BUG-1502053: High severity openjdk 8 vulnerability

Published Oct 13, 2017

Updated

It was discovered that the CardImpl class in the Smart Card IO component of OpenJDK failed to properly update its state in the finalize() method. An untrusted Java application or applet could possibly use this flaw to gain unexpected access to a smart card, bypassing certain Java sandbox restrictions.

Affected Software

1 affected component

ORACLE OpenJDK

Event History

Oct 13, 2017

Data Sourced

via Red Hat·08:02 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1502053?

The vulnerability REDHAT-BUG-1502053 is rated as high severity due to its potential to allow unauthorized access to smart cards.

How do I fix REDHAT-BUG-1502053?

To fix REDHAT-BUG-1502053, you should update to the latest version of the OpenJDK that addresses this vulnerability.

Who is affected by REDHAT-BUG-1502053?

The REDHAT-BUG-1502053 vulnerability affects users running the OpenJDK 17 on systems using the Smart Card IO component.

Can an untrusted application exploit REDHAT-BUG-1502053?

Yes, an untrusted Java application can exploit REDHAT-BUG-1502053 to gain unexpected access to smart cards.

Does REDHAT-BUG-1502053 bypass Java sandbox restrictions?

Yes, REDHAT-BUG-1502053 has the potential to bypass certain Java sandbox restrictions.