REDHAT-BUG-1823694: High severity openjdk 8 vulnerability

Published Apr 14, 2020

Updated

It was discovered that the boundary checks in the java.nio Buffer classes in the Libraries component of OpenJDK could be bypassed in certain cases. An untrusted Java application or applet could use this flaw to bypass Java sandbox restrictions.

Affected Software

1 affected component

ORACLE OpenJDK

Event History

Apr 14, 2020

Data Sourced

via Red Hat·09:52 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1823694?

The severity of REDHAT-BUG-1823694 is considered critical due to its potential to bypass Java sandbox restrictions.

How do I fix REDHAT-BUG-1823694?

To fix REDHAT-BUG-1823694, update your OpenJDK version to the latest recommended release.

Which software is affected by REDHAT-BUG-1823694?

The affected software for REDHAT-BUG-1823694 is Oracle OpenJDK, specifically versions that utilize the java.nio Buffer classes.

What is the impact of REDHAT-BUG-1823694?

The impact of REDHAT-BUG-1823694 allows untrusted Java applications or applets to bypass intended security restrictions in the Java environment.

Is there a workaround for REDHAT-BUG-1823694?

Currently, the best approach for REDHAT-BUG-1823694 is to apply the latest security updates as there are no reliable workarounds.