REDHAT-BUG-1823199: Low severity OpenJDK Nashorn JavaScript engine vulnerability

Published Apr 12, 2020

Updated

A flaw was found in the Nashorn JavaScript engine in the Scripting component of OpenJDK. Processing of the forward references prior to checking for regular expression syntax errors could cause an unexpected exception to be raised when processing a specially crafted regular expression.

Affected Software

1 affected component

OpenJDK Nashorn JavaScript engine

Event History

Apr 12, 2020

Data Sourced

via Red Hat·04:02 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1823199?

The severity of REDHAT-BUG-1823199 is classified as moderate due to the potential for unexpected exceptions in the Nashorn JavaScript engine.

How do I fix REDHAT-BUG-1823199?

To fix REDHAT-BUG-1823199, update your OpenJDK to the latest version that addresses this flaw.

Which versions of the Nashorn JavaScript engine are affected by REDHAT-BUG-1823199?

REDHAT-BUG-1823199 affects versions of the Nashorn JavaScript engine bundled with OpenJDK prior to the fix.

What kind of attack can REDHAT-BUG-1823199 lead to?

REDHAT-BUG-1823199 can lead to application crashes when processing specially crafted regular expressions.

Is REDHAT-BUG-1823199 present in other JavaScript engines?

REDHAT-BUG-1823199 is specifically related to the Nashorn JavaScript engine in OpenJDK and is not present in other JavaScript engines.