REDHAT-BUG-2041789: Medium severity openjdk 8 vulnerability

Published Jan 18, 2022

Updated

A flaw was found in the way the TIFFFaxDecompressor, TIFFLZWDecompressor, and TIFFPackBitsDecompressor classes implementations in the ImageIO component of OpenJDK handled memory allocations when processing TIFF images. A specially-crafted TIFF image with a small size could cause a Java application to allocate an excessive amount of memory when opened.

Affected Software

1 affected component

ORACLE OpenJDK

Event History

Jan 18, 2022

Data Sourced

via Red Hat·10:05 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2041789?

The severity of REDHAT-BUG-2041789 is categorized as high due to its potential impact on Java applications processing TIFF images.

How do I fix REDHAT-BUG-2041789?

To fix REDHAT-BUG-2041789, update to the latest version of OpenJDK that includes the patch addressing this vulnerability.

What systems are affected by REDHAT-BUG-2041789?

REDHAT-BUG-2041789 affects systems running Oracle OpenJDK, specifically those utilizing TIFF image processing.

What are the potential impacts of REDHAT-BUG-2041789?

The potential impacts of REDHAT-BUG-2041789 include application crashes and possible remote code execution due to memory corruption.

Is there a workaround for REDHAT-BUG-2041789?

Currently, it is recommended to upgrade OpenJDK as the primary solution, as no specific workarounds have been documented.