REDHAT-BUG-1823947: Medium severity sun jsse vulnerability

Published Apr 14, 2020

Updated

A flaw was found in the way the TLS implementation in the JSSE component of OpenJDK handled unexpected Certificate messages during the TLS handshake. This could possibly allow an attacker to tamper with certificate verification performed during the handshake.

Affected Software

1 affected component

OpenJDK JSSE

Event History

Apr 14, 2020

Data Sourced

via Red Hat·08:22 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1823947?

The severity of REDHAT-BUG-1823947 is classified as significant due to the potential for an attacker to tamper with certificate verification during the TLS handshake.

How do I fix REDHAT-BUG-1823947?

To fix REDHAT-BUG-1823947, you should update your OpenJDK JSSE to a version that includes the latest security patches addressing this vulnerability.

What systems are affected by REDHAT-BUG-1823947?

REDHAT-BUG-1823947 affects systems running the JSSE component of OpenJDK implementations.

What could happen if REDHAT-BUG-1823947 is exploited?

If REDHAT-BUG-1823947 is exploited, attackers may be able to tamper with the TLS handshake, compromising the integrity of secure communications.

Is there a workaround for REDHAT-BUG-1823947?

Currently, there are no known effective workarounds for REDHAT-BUG-1823947, so applying the security update is the recommended action.