REDHAT-BUG-1823542: Medium severity OpenJDK Concurrency vulnerability
Published Apr 13, 2020
·Updated
A regular expression denial of service flaw was found in the Concurrency component of OpenJDK. The use of overly complex regular expressions in java.utils.Scanner could cause a high CPU usage when Scanner was used on parse certain inputs.
Affected Software
2 affected components
OpenJDK Concurrency
OpenJDK java.utils.Scanner
Event History
Apr 13, 2020
Data Sourced
via Red Hat·09:29 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Which systems are potentially exposed?
Systems using OpenJDK components that invoke java.utils.Scanner to parse inputs are potentially exposed.
2
Which remediation advisories are referenced?
The referenced Red Hat advisories are RHSA-2020:1508 and RHSA-2020:1507. An Oracle April 2020 Java CPU advisory is also referenced.