REDHAT-BUG-1791284
First published: Wed Jan 15 2020(Updated: )
It was discovered that the DatagramChannelImpl class in the Networking component of OpenJDK failed to completely enforce the limit of the number of datagram sockets (set using the sun.net.maxDatagramSockets system property) that can be created by a code running with the Java sandbox restrictions. An untrusted Java code could use this flaw to bypass the intended Java sandbox restriction.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| OpenJDK 17 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://www.oracle.com/security-alerts/cpujan2020.html#AppendixJAVA
- https://access.redhat.com/errata/RHSA-2020:0157
- https://access.redhat.com/errata/RHSA-2020:0196
- https://access.redhat.com/errata/RHSA-2020:0202
- https://access.redhat.com/errata/RHSA-2020:0231
- https://access.redhat.com/errata/RHSA-2020:0465
- https://access.redhat.com/errata/RHSA-2020:0467
- https://access.redhat.com/errata/RHSA-2020:0469
- https://access.redhat.com/errata/RHSA-2020:0468
- https://access.redhat.com/errata/RHSA-2020:0470
- https://access.redhat.com/errata/RHSA-2020:0541
- http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/c9b0a18f082e
- http://hg.openjdk.java.net/jdk8u/jdk8u/jdk/rev/9ea5e5b2cd63
- https://access.redhat.com/errata/RHSA-2020:0632
- https://access.redhat.com/security/cve/cve-2020-2659
- https://access.redhat.com/errata/RHSA-2020:0856
- https://bugzilla.redhat.com/show_bug.cgi?id=1791284
Frequently Asked Questions
What is the severity of REDHAT-BUG-1791284?
The severity of REDHAT-BUG-1791284 is categorized as high due to the potential for denial of service attacks.
How do I fix REDHAT-BUG-1791284?
To fix REDHAT-BUG-1791284, upgrade to the patched version of Oracle OpenJDK that resolves this issue.
Which versions of OpenJDK are affected by REDHAT-BUG-1791284?
The vulnerability REDHAT-BUG-1791284 affects OpenJDK 17 and potentially earlier versions depending on system configurations.
Does REDHAT-BUG-1791284 affect Java applications running outside the sandbox?
No, REDHAT-BUG-1791284 specifically impacts applications running with Java sandbox restrictions.
Can REDHAT-BUG-1791284 lead to unauthorized access?
Although REDHAT-BUG-1791284 is primarily a denial of service vulnerability, it may lead to indirect issues that could compromise system integrity.
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2020-2659
- agent/severity
- agent/references
- agent/description
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/oracle
- canonical/openjdk 17