REDHAT-BUG-1790444: Low severity openjdk vulnerability

Published Jan 13, 2020

Updated

A flaw was found in the what the BeanContextSupport class in the Serialization component of OpenJDK handled exceptions during deserialization. A specially-crafted input could cause a Java application to use an excessive amount of resources when deserialized.

Affected Software

1 affected component

OpenJDK OpenJDK

Event History

Jan 13, 2020

Data Sourced

via Red Hat·11:08 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1790444?

The severity of REDHAT-BUG-1790444 is assessed as critical due to the potential for resource exhaustion attacks.

How do I fix REDHAT-BUG-1790444?

To fix REDHAT-BUG-1790444, upgrade to the latest patched version of OpenJDK provided by your vendor.

What impact does REDHAT-BUG-1790444 have on my application?

REDHAT-BUG-1790444 may enable attackers to cause excessive resource usage in Java applications when crafting specific malicious inputs.

Is my version of OpenJDK vulnerable to REDHAT-BUG-1790444?

Versions of OpenJDK that are not updated with the latest security patches may be vulnerable to REDHAT-BUG-1790444.

What types of applications are affected by REDHAT-BUG-1790444?

Any Java application utilizing the BeanContextSupport class in OpenJDK during deserialization processes may be affected by REDHAT-BUG-1790444.