REDHAT-BUG-1856784: High severity OpenJDK OpenJDK 2D Component vulnerability

Published Jul 14, 2020

Updated

A flaw was found in the way the imaging library in the 2D component of OpenJDK performed affine transformations of images. An untrusted Java application or applet could use this flaw to bypass certain Java sandbox restrictions.

Affected Software

1 affected component

OpenJDK OpenJDK 2D Component

Event History

Jul 14, 2020

Data Sourced

via Red Hat·01:12 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1856784?

The severity of REDHAT-BUG-1856784 is classified as critical due to the potential for bypassing Java sandbox restrictions.

How do I fix REDHAT-BUG-1856784?

To fix REDHAT-BUG-1856784, you should update to the latest version of OpenJDK that addresses this flaw.

What kind of applications are affected by REDHAT-BUG-1856784?

REDHAT-BUG-1856784 affects untrusted Java applications or applets that utilize the 2D component of OpenJDK.

Can REDHAT-BUG-1856784 be exploited remotely?

Yes, REDHAT-BUG-1856784 can potentially be exploited remotely if an attacker runs an untrusted application that leverages the flaw.

What are the potential consequences of REDHAT-BUG-1856784?

The potential consequences of REDHAT-BUG-1856784 include unauthorized access to system resources and data due to sandbox restrictions being bypassed.