REDHAT-BUG-1823853: High severity openjdk 8 vulnerability

Published Apr 14, 2020

Updated

It was discovered that the TLS/SSL implementation in the JSEE component of OpenJDK did not properly handle application data packets received prior to the handshake completion. This could allow unauthorized injection of data at the beginning a TLS session.

Affected Software

1 affected component

ORACLE OpenJDK

Event History

Apr 14, 2020

Data Sourced

via Red Hat·03:56 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1823853?

The severity of REDHAT-BUG-1823853 is classified as critical due to the potential for unauthorized data injection in TLS sessions.

How do I fix REDHAT-BUG-1823853?

To fix REDHAT-BUG-1823853, update your OpenJDK to the latest patched version that addresses this vulnerability.

What software is affected by REDHAT-BUG-1823853?

The affected software for REDHAT-BUG-1823853 is specifically Oracle OpenJDK, especially version 17.

What type of attack does REDHAT-BUG-1823853 facilitate?

REDHAT-BUG-1823853 facilitates unauthorized injection of data prior to the completion of the TLS handshake.

Is there a workaround for REDHAT-BUG-1823853?

There are no recommended workarounds for REDHAT-BUG-1823853; updating OpenJDK is the best course of action.