REDHAT-BUG-2014515: Medium severity OpenJDK Swing vulnerability

Published Oct 15, 2021

Updated

A flaw was found in the way the RTFParser class implementation in the Swing component of OpenJDK handled memory allocations. A specially crafted Rich Text Format (RTF) file could cause a Java application using RTFParser to allocate an excessive amount of memory and possibly terminate on out-of-memory condition.

Affected Software

1 affected component

OpenJDK Swing

Event History

Oct 15, 2021

Data Sourced

via Red Hat·01:02 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2014515?

The severity of REDHAT-BUG-2014515 is categorized as high due to the potential for excessive memory allocation and application termination.

How do I fix REDHAT-BUG-2014515?

To fix REDHAT-BUG-2014515, you should update your OpenJDK installation to the latest version that addresses this vulnerability.

Who is affected by REDHAT-BUG-2014515?

Users of OpenJDK Swing applications that process Rich Text Format (RTF) files are affected by REDHAT-BUG-2014515.

What type of vulnerability is REDHAT-BUG-2014515?

REDHAT-BUG-2014515 is a memory allocation vulnerability that can lead to denial of service in Java applications using RTFParser.

What can happen if I do not address REDHAT-BUG-2014515?

If REDHAT-BUG-2014515 is not addressed, vulnerable applications may become unresponsive or crash due to excessive memory consumption.