REDHAT-BUG-1823844: High severity openjdk 8 vulnerability

Published Apr 14, 2020

Updated

A flaw was found in the way the readObject() method of the MethodType class in the Libraries component of OpenJDK checked argument types. An untrusted Java application or applet could use this flaw to bypass Java sandbox restrictions.

Affected Software

1 affected component

ORACLE OpenJDK

Event History

Apr 14, 2020

Data Sourced

via Red Hat·03:33 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1823844?

The severity of REDHAT-BUG-1823844 is classified as high due to the potential for an untrusted Java application to bypass sandbox restrictions.

How do I fix REDHAT-BUG-1823844?

To fix REDHAT-BUG-1823844, update your OpenJDK version to the latest security patched release.

What versions of OpenJDK are affected by REDHAT-BUG-1823844?

OpenJDK 17 may be affected by REDHAT-BUG-1823844 as it contains the vulnerability in the MethodType class.

Can REDHAT-BUG-1823844 be exploited remotely?

Yes, REDHAT-BUG-1823844 can potentially be exploited remotely by untrusted Java applications or applets.

What components of OpenJDK are impacted by REDHAT-BUG-1823844?

The Libraries component of OpenJDK is impacted by the flaw described in REDHAT-BUG-1823844.