REDHAT-BUG-1889895: Race Condition

Published Oct 20, 2020

Updated

It was discovered that the NIO Buffer implementation in the Libraries component of OpenJDK contained a race condition affecting boundary checks. An untrusted Java application or applet could use this flaw to bypass certain Java sandbox restrictions.

Affected Software

1 affected component

OpenJDK OpenJDK Libraries

Event History

Oct 20, 2020

Data Sourced

via Red Hat·08:46 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1889895?

The severity of REDHAT-BUG-1889895 is classified as critical due to the potential for bypassing Java sandbox restrictions.

How do I fix REDHAT-BUG-1889895?

To fix REDHAT-BUG-1889895, you should update your OpenJDK Libraries to the latest version that includes the security patch.

What systems are affected by REDHAT-BUG-1889895?

REDHAT-BUG-1889895 affects systems running vulnerable versions of OpenJDK Libraries.

What type of vulnerability is REDHAT-BUG-1889895?

REDHAT-BUG-1889895 is a race condition vulnerability that affects boundary checks in the NIO Buffer implementation.

Can an untrusted application exploit REDHAT-BUG-1889895?

Yes, an untrusted Java application or applet could exploit REDHAT-BUG-1889895 to bypass certain Java sandbox restrictions.