REDHAT-BUG-1502649: Medium severity openjdk vulnerability

Published Oct 16, 2017

Updated

It was discovered that the implementation of multiple classes in the Serialization component of OpenJDK did not limit the amount of memory allocated when creating object instances from a serialized form. A specially-crafted input could cause a Java application to use an excessive amount of memory when deserialized.

Affected Software

1 affected component

OpenJDK OpenJDK

Event History

Oct 16, 2017

Data Sourced

via Red Hat·11:39 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1502649?

The severity of REDHAT-BUG-1502649 is classified as high due to its potential impact on memory allocation.

How do I fix REDHAT-BUG-1502649?

To fix REDHAT-BUG-1502649, update to the latest version of OpenJDK that includes the necessary patches.

What causes REDHAT-BUG-1502649?

REDHAT-BUG-1502649 is caused by the lack of memory allocation limits in the Serialization component of OpenJDK when handling specially-crafted input.

What versions of OpenJDK are affected by REDHAT-BUG-1502649?

Versions of OpenJDK prior to the latest fixed release may be affected by REDHAT-BUG-1502649.

How can REDHAT-BUG-1502649 impact my application?

REDHAT-BUG-1502649 can lead to excessive memory consumption and potential application crashes.