REDHAT-BUG-1823224
First published: Sun Apr 12 2020(Updated: )
A flaw was found in the Security component of OpenJDK. It was discovered that the unmarshalKeyInfo() method of the DOMKeyInfoFactory class and the unmarshalXMLSignature() method of the DOMXMLSignatureFactory class could raise exceptions not declared as thrown by these methods when reading key info or XML signature data from XML input.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| OpenJDK |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://www.oracle.com/security-alerts/cpuapr2020.html#AppendixJAVA
- https://access.redhat.com/errata/RHSA-2020:1508
- https://access.redhat.com/errata/RHSA-2020:1507
- https://access.redhat.com/errata/RHSA-2020:1506
- https://access.redhat.com/errata/RHSA-2020:1509
- https://access.redhat.com/errata/RHSA-2020:1512
- https://access.redhat.com/errata/RHSA-2020:1514
- https://access.redhat.com/security/cve/cve-2020-2773
- https://access.redhat.com/errata/RHSA-2020:1517
- https://access.redhat.com/errata/RHSA-2020:1516
- https://access.redhat.com/errata/RHSA-2020:1515
- http://hg.openjdk.java.net/jdk-updates/jdk11u/rev/27ad88b18a27
- http://hg.openjdk.java.net/jdk8u/jdk8u/jdk/rev/36afd1d59467
- http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/bf7ec0e106be
- https://access.redhat.com/errata/RHSA-2021:0717
- https://access.redhat.com/errata/RHSA-2021:0736
- https://bugzilla.redhat.com/show_bug.cgi?id=1823224
Frequently Asked Questions
What is the severity of REDHAT-BUG-1823224?
The severity of REDHAT-BUG-1823224 is considered to be moderate.
How do I fix REDHAT-BUG-1823224?
To fix REDHAT-BUG-1823224, update your OpenJDK to the latest version provided by the vendor.
Which versions of OpenJDK are affected by REDHAT-BUG-1823224?
All supported versions of OpenJDK that utilize the vulnerable methods are affected by REDHAT-BUG-1823224.
What is the nature of the flaw in REDHAT-BUG-1823224?
The flaw in REDHAT-BUG-1823224 allows exceptions to be raised by certain methods that are not declared as throwable.
Is there a workaround for REDHAT-BUG-1823224?
Currently, the recommended action for REDHAT-BUG-1823224 is to apply the provided updates rather than using a workaround.
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2020-2773
- agent/severity
- agent/references
- agent/description
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/openjdk
- canonical/openjdk