REDHAT-BUG-2041491: Medium severity openjdk 8 vulnerability

Published Jan 17, 2022

Updated

A flaw was found in the way the BMPImageReader class implementation in the ImageIO component of OpenJDK preformed memory allocations when reading palette information from BMP images. A specially-crafted BMP file could cause a Java application to consume an excessive amount of memory when opened.

Affected Software

1 affected component

ORACLE OpenJDK

Event History

Jan 17, 2022

Data Sourced

via Red Hat·01:51 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2041491?

REDHAT-BUG-2041491 has been classified as a moderate severity vulnerability due to its potential to cause excessive memory consumption.

How do I fix REDHAT-BUG-2041491?

To fix REDHAT-BUG-2041491, update to the latest patched version of OpenJDK as recommended by Oracle.

What software is affected by REDHAT-BUG-2041491?

REDHAT-BUG-2041491 affects the OpenJDK 17 version from Oracle.

What type of vulnerability is REDHAT-BUG-2041491?

REDHAT-BUG-2041491 is a memory allocation vulnerability specifically found in the BMPImageReader class of the ImageIO component.

What impact does REDHAT-BUG-2041491 have on Java applications?

The impact of REDHAT-BUG-2041491 is that it can lead to Java applications consuming excessive memory when handling specially-crafted BMP files.