REDHAT-BUG-1790944: High severity openjdk 8 vulnerability

Published Jan 14, 2020

Updated

A flaw was found in the Serialization component of OpenJDK handled serialization filter. A process-wide filter could have been modified by setting jdk.serialFilter system property at runtime, possibly leading to a bypass of the intended filter during deserialization.

Affected Software

1 affected component

ORACLE OpenJDK

Event History

Jan 14, 2020

Data Sourced

via Red Hat·03:09 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1790944?

The severity of REDHAT-BUG-1790944 is currently rated as high due to the potential for deserialization attacks.

How do I fix REDHAT-BUG-1790944?

To fix REDHAT-BUG-1790944, ensure you are using a patched version of OpenJDK that resolves the serialization filter issue.

What versions of OpenJDK are affected by REDHAT-BUG-1790944?

OpenJDK versions including and prior to version 17 are affected by REDHAT-BUG-1790944.

What is the impact of REDHAT-BUG-1790944?

The impact of REDHAT-BUG-1790944 could allow an attacker to bypass the intended serialization filter during deserialization, leading to potential security breaches.

Is REDHAT-BUG-1790944 a known vulnerability?

Yes, REDHAT-BUG-1790944 is a known vulnerability reported in the serialization component of OpenJDK.