REDHAT-BUG-1889280: Integer Overflow

Published Oct 19, 2020

Updated

It was discovered that the Hotspot component of OpenJDK did not properly check for integer overflows when when optimizing code, leading to out-of-bounds access. An untrusted Java application or applet could use this flaw to bypass certain Java sandbox restrictions.

Affected Software

1 affected component

OpenJDK Hotspot

Event History

Oct 19, 2020

Data Sourced

via Red Hat·09:10 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1889280?

The severity of REDHAT-BUG-1889280 is considered high due to the potential for bypassing Java sandbox restrictions.

How do I fix REDHAT-BUG-1889280?

To fix REDHAT-BUG-1889280, update to the latest version of OpenJDK Hotspot that addresses this vulnerability.

What causes the vulnerability REDHAT-BUG-1889280?

The vulnerability REDHAT-BUG-1889280 is caused by improper checking for integer overflows in the Hotspot component of OpenJDK.

Who is affected by REDHAT-BUG-1889280?

Users running untrusted Java applications or applets on systems with vulnerable versions of OpenJDK Hotspot are affected by REDHAT-BUG-1889280.

What are the potential impacts of REDHAT-BUG-1889280?

The potential impacts of REDHAT-BUG-1889280 include unauthorized access and execution of code that could bypass Java security measures.