REDHAT-BUG-1856448: High severity OpenJDK Libraries vulnerability

Published Jul 13, 2020

Updated

It was discovered that the boundary checks in the java.nio.Buffer class in the Libraries component of OpenJDK could have been bypassed when class instance was accessed concurrently. An untrusted Java application or applet could use this flaw to bypass Java sandbox restrictions.

Affected Software

1 affected component

OpenJDK Libraries

Event History

Jul 13, 2020

Data Sourced

via Red Hat·04:46 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1856448?

The severity of REDHAT-BUG-1856448 is considered high due to the potential for privilege escalation in Java applications.

How do I fix REDHAT-BUG-1856448?

To fix REDHAT-BUG-1856448, update to the latest version of OpenJDK that addresses this vulnerability.

What systems are affected by REDHAT-BUG-1856448?

REDHAT-BUG-1856448 affects systems running OpenJDK Libraries where concurrent access to the Buffer class occurs.

What kind of attacks can REDHAT-BUG-1856448 enable?

REDHAT-BUG-1856448 can enable untrusted Java applications to bypass Java sandbox restrictions, leading to potential malicious activities.

Is there a workaround for REDHAT-BUG-1856448?

There is no official workaround for REDHAT-BUG-1856448; updating to a patched version is recommended.