REDHAT-BUG-1534543: Medium severity openjdk vulnerability

Published Jan 15, 2018

Updated

It was discovered that the DNS client implementation in the JNDI component of OpenJDK did not use random source ports when sending out DNS queries. This would make it easier for a remote attacker to spoof responses to those queries.

Affected Software

1 affected component

OpenJDK JNDI

Event History

Jan 15, 2018

Data Sourced

via Red Hat·01:16 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1534543?

The severity of REDHAT-BUG-1534543 is classified as high due to the potential for DNS response spoofing.

How do I fix REDHAT-BUG-1534543?

To fix REDHAT-BUG-1534543, update your OpenJDK to the latest version that contains the patch addressing the random source port issue.

What versions of OpenJDK are affected by REDHAT-BUG-1534543?

REDHAT-BUG-1534543 affects specific versions of OpenJDK that utilize the JNDI component for DNS queries.

What are the risks associated with REDHAT-BUG-1534543?

The risks associated with REDHAT-BUG-1534543 include increased exposure to DNS spoofing attacks, potentially allowing attackers to intercept or manipulate network traffic.

Is REDHAT-BUG-1534543 a known issue in other software?

Yes, REDHAT-BUG-1534543 is a known issue primarily associated with OpenJDK's JNDI implementation, but similar vulnerabilities can occur in other software handling DNS queries.