REDHAT-BUG-1642321: Medium severity OpenJDK Utility vulnerability

Published Oct 24, 2018

Updated

A flaw was found in the Utility component of OpenJDK. The Multi-Release attribute could have been read from outside of the main attributes in a Jar manifest, possibly leading to a use of an unsigned value for this attribute. An untrusted Java application or applet could use this flaw to bypass certain Java sandbox restrictions.

Affected Software

1 affected component

OpenJDK Utility

Event History

Oct 24, 2018

Data Sourced

via Red Hat·07:55 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1642321?

The severity of REDHAT-BUG-1642321 is considered medium due to the potential for bypassing security measures in Java applications.

How do I fix REDHAT-BUG-1642321?

To fix REDHAT-BUG-1642321, update your OpenJDK Utility to the latest patched version.

What vulnerabilities are associated with REDHAT-BUG-1642321?

REDHAT-BUG-1642321 is associated with the risk of executing unsigned attributes, potentially leading to untrusted application execution.

Who is affected by REDHAT-BUG-1642321?

Users and applications running affected versions of OpenJDK Utility are susceptible to vulnerabilities described in REDHAT-BUG-1642321.

What should I do if I'm using an application that relies on OpenJDK Utility regarding REDHAT-BUG-1642321?

If using an application reliant on OpenJDK Utility, ensure that you have implemented the recommended updates to mitigate REDHAT-BUG-1642321.