REDHAT-BUG-1534768
First published: Mon Jan 15 2018(Updated: )
It was discovered that the Hotspot component of OpenJDK failed to properly validate uses of the invokeinterface Java Virtual Machine instruction. An untrusted Java application or applet could use this flaw to bypass certain Java sandbox restrictions.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Build of OpenJDK with Hotspot |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA
- https://access.redhat.com/errata/RHSA-2018:0095
- https://access.redhat.com/errata/RHSA-2018:0099
- http://hg.openjdk.java.net/jdk8u/jdk8u/jdk/rev/a3e756231625
- http://hg.openjdk.java.net/jdk8u/jdk8u/hotspot/rev/f8a45a60bc6b
- http://hg.openjdk.java.net/jdk8u/jdk8u/hotspot/rev/b1606443958a
- https://access.redhat.com/errata/RHSA-2018:0351
- https://access.redhat.com/errata/RHSA-2018:0352
- https://access.redhat.com/errata/RHSA-2018:0458
- https://access.redhat.com/errata/RHSA-2018:0521
- https://access.redhat.com/errata/RHSA-2018:1463
- https://bugzilla.redhat.com/show_bug.cgi?id=1534768
Frequently Asked Questions
What is the severity of REDHAT-BUG-1534768?
The severity of REDHAT-BUG-1534768 is classified as critical due to the potential bypass of Java sandbox restrictions.
How do I fix REDHAT-BUG-1534768?
To fix REDHAT-BUG-1534768, update your OpenJDK Hotspot installation to the latest patched version.
What systems are affected by REDHAT-BUG-1534768?
REDHAT-BUG-1534768 affects systems running OpenJDK Hotspot where untrusted Java applications are executed.
Can REDHAT-BUG-1534768 lead to a remote execution vulnerability?
Yes, REDHAT-BUG-1534768 can potentially allow an untrusted Java application to execute malicious code under the user's permissions.
Is REDHAT-BUG-1534768 related to Java security?
Yes, REDHAT-BUG-1534768 involves a security flaw in the Java Virtual Machine that impacts its ability to enforce sandbox restrictions.
- agent/references
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2018-2582
- agent/severity
- agent/description
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/openjdk
- canonical/microsoft build of openjdk with hotspot