REDHAT-BUG-1534766: Use After Free
First published: Mon Jan 15 2018(Updated: )
A use-after-free flaw was found in the way the AWT component of OpenJDK performed loading of the GTK library. An untrusted Java application or applet could use this flaw to possibly bypass certain Java sandbox restrictions.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| OpenJDK 17 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA
- https://access.redhat.com/errata/RHSA-2018:0095
- https://access.redhat.com/errata/RHSA-2018:0099
- https://access.redhat.com/errata/RHSA-2018:0100
- https://access.redhat.com/errata/RHSA-2018:0115
- http://hg.openjdk.java.net/jdk8u/jdk8u/jdk/rev/fef2bdb968d7
- https://access.redhat.com/errata/RHSA-2018:0351
- https://access.redhat.com/errata/RHSA-2018:0352
- https://access.redhat.com/errata/RHSA-2018:0349
- https://access.redhat.com/errata/RHSA-2018:0458
- https://access.redhat.com/errata/RHSA-2018:0521
- https://access.redhat.com/errata/RHSA-2018:1463
- https://access.redhat.com/errata/RHSA-2018:1812
- https://bugzilla.redhat.com/show_bug.cgi?id=1534766
Frequently Asked Questions
What is the severity of REDHAT-BUG-1534766?
The severity of REDHAT-BUG-1534766 is classified as moderate due to its potential to bypass Java sandbox restrictions.
How do I fix REDHAT-BUG-1534766?
To fix REDHAT-BUG-1534766, you should update to the latest patched version of OpenJDK provided by your vendor.
What software is affected by REDHAT-BUG-1534766?
REDHAT-BUG-1534766 affects the Oracle OpenJDK, specifically OpenJDK 17 and its implementations.
What issue does REDHAT-BUG-1534766 address?
REDHAT-BUG-1534766 addresses a use-after-free flaw that could allow untrusted Java applications to bypass sandbox restrictions.
Is there a workaround for REDHAT-BUG-1534766 before applying a fix?
There are no recommended workarounds for REDHAT-BUG-1534766; applying the fix is strongly advised.
- agent/references
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2018-2641
- agent/severity
- agent/weakness
- agent/description
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/oracle
- canonical/openjdk 17