REDHAT-BUG-1761006: Medium severity openjdk vulnerability

Published Oct 11, 2019

Updated

A flaw was found in the way the Jar URL handler in the Networking component in OpenJDK handled URLs with nested jar: URLs. A specially crafted URL could cause Java application to exit when parsed.

Affected Software

1 affected component

OpenJDK OpenJDK

Event History

Oct 11, 2019

Data Sourced

via Red Hat·09:57 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the CVE severity of REDHAT-BUG-1761006?

The severity of REDHAT-BUG-1761006 is classified as moderate due to its potential to cause application crashes.

How can I mitigate the effects of REDHAT-BUG-1761006?

You can mitigate REDHAT-BUG-1761006 by updating to a fixed version of the OpenJDK software where the vulnerability has been addressed.

Which application versions are affected by REDHAT-BUG-1761006?

REDHAT-BUG-1761006 affects multiple versions of OpenJDK that utilize the jar URL handler.

What kind of attack could exploit REDHAT-BUG-1761006?

An attacker could exploit REDHAT-BUG-1761006 by crafting a malicious jar URL that induces an application crash.

What symptoms indicate an exploit of REDHAT-BUG-1761006?

Symptoms of an exploit of REDHAT-BUG-1761006 may include unexpected application exits or crashes when processing jar URLs.