REDHAT-BUG-2014518: Medium severity OpenJDK Swing vulnerability

Published Oct 15, 2021

Updated

A flaw was found in the way the RTFReader class implementation in the Swing component of OpenJDK handled style keyword parameters. A specially crafted Rich Text Format (RTF) file could cause a Java application using RTFReader to allocate an excessive ammount of memory and possibly terminate on out-of-memory condition.

Affected Software

1 affected component

OpenJDK Swing

Event History

Oct 15, 2021

Data Sourced

via Red Hat·01:13 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2014518?

The severity of REDHAT-BUG-2014518 is considered high due to the potential for excessive memory allocation leading to application termination.

How do I fix REDHAT-BUG-2014518?

To fix REDHAT-BUG-2014518, ensure that you update to the latest version of OpenJDK that addresses this vulnerability.

What type of applications are affected by REDHAT-BUG-2014518?

Java applications utilizing the RTFReader class in OpenJDK Swing are affected by REDHAT-BUG-2014518.

Can REDHAT-BUG-2014518 lead to data loss?

Yes, if the application crashes due to REDHAT-BUG-2014518, it may result in unsaved data being lost.

Is there a workaround for REDHAT-BUG-2014518?

Currently, the best approach for REDHAT-BUG-2014518 is to apply the necessary updates rather than relying on a workaround.