REDHAT-BUG-2014508: High severity openjdk 8 vulnerability

Published Oct 15, 2021

Updated

An inifinte loop flaw was found in the HttpsServer class implementation in the JSSE component of OpenJDK. A remote attacker could possibly use this flaw to cause a Java application implementing HTTPS server functionality to loop during the TLS session closing and consume an excessive amount of CPU time.

Affected Software

1 affected component

ORACLE OpenJDK

Event History

Oct 15, 2021

Data Sourced

via Red Hat·12:48 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2014508?

The vulnerability REDHAT-BUG-2014508 has a high severity rating due to the potential for excessive CPU consumption.

How do I fix REDHAT-BUG-2014508?

To fix REDHAT-BUG-2014508, upgrade to a patched version of OpenJDK that addresses this infinite loop flaw.

Who is affected by REDHAT-BUG-2014508?

Users of OpenJDK, specifically version 17, implementing HTTPS server functionality are affected by REDHAT-BUG-2014508.

What is the exploitability of REDHAT-BUG-2014508?

REDHAT-BUG-2014508 is exploitable remotely, allowing attackers to cause denial of service effects.

When was REDHAT-BUG-2014508 discovered?

REDHAT-BUG-2014508 was reported as a vulnerability in October 2021.