REDHAT-BUG-1639301: Medium severity OpenJDK Java vulnerability
Published Oct 15, 2018
·Updated
An infinite loop flaw was found in the RIFF (Resource Interchange File Format) file format reader in the Sound component of OpenJDK. A specially crafted RIFF file could cause a Java application to enter an infinite loop while reading the RIFF file.
Affected Software
1 affected component
OpenJDK Java
Event History
Oct 15, 2018
Data Sourced
via Red Hat·01:16 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What does an attacker need to do to trigger the issue?
The attacker needs to provide a specially crafted RIFF file that is processed by the OpenJDK Sound component. When a Java application reads that file, it can enter an infinite loop.
2
What is the practical impact on an affected application?
The affected Java application can become stuck in an infinite loop while reading the malicious RIFF file, creating a denial-of-service condition for that processing task.