REDHAT-BUG-1534970: High severity OpenJDK JMX vulnerability

Published Jan 16, 2018

Updated

It was discovered that the JMX component of OpenJDK failed to properly set the deserialization filter for the SingleEntryRegistry in certain cases. A remote attacker could possibly use this flaw to bypass intended deserialization restrictions.

Affected Software

1 affected component

OpenJDK JMX

Event History

Jan 16, 2018

Data Sourced

via Red Hat·11:59 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1534970?

The severity of REDHAT-BUG-1534970 is classified as critical due to the potential for remote code execution.

How do I fix REDHAT-BUG-1534970?

To fix REDHAT-BUG-1534970, update OpenJDK JMX to the latest version where the deserialization filter is properly set.

What are the potential impacts of REDHAT-BUG-1534970?

The potential impacts of REDHAT-BUG-1534970 include unauthorized remote access and execution of arbitrary code by an attacker.

Who is affected by REDHAT-BUG-1534970?

Users of OpenJDK JMX are affected by REDHAT-BUG-1534970, particularly those with unsecured remote access.

Is there a workaround for REDHAT-BUG-1534970?

As of now, the recommended solution is to apply the necessary updates rather than relying on a workaround.