REDHAT-BUG-1534768: High severity microsoft build of openjdk with hotspot vulnerability

Published Jan 15, 2018

Updated

It was discovered that the Hotspot component of OpenJDK failed to properly validate uses of the invokeinterface Java Virtual Machine instruction. An untrusted Java application or applet could use this flaw to bypass certain Java sandbox restrictions.

Affected Software

1 affected component

OpenJDK Hotspot

Event History

Jan 15, 2018

Data Sourced

via Red Hat·10:31 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1534768?

The severity of REDHAT-BUG-1534768 is classified as critical due to the potential bypass of Java sandbox restrictions.

How do I fix REDHAT-BUG-1534768?

To fix REDHAT-BUG-1534768, update your OpenJDK Hotspot installation to the latest patched version.

What systems are affected by REDHAT-BUG-1534768?

REDHAT-BUG-1534768 affects systems running OpenJDK Hotspot where untrusted Java applications are executed.

Can REDHAT-BUG-1534768 lead to a remote execution vulnerability?

Yes, REDHAT-BUG-1534768 can potentially allow an untrusted Java application to execute malicious code under the user's permissions.

Is REDHAT-BUG-1534768 related to Java security?

Yes, REDHAT-BUG-1534768 involves a security flaw in the Java Virtual Machine that impacts its ability to enforce sandbox restrictions.