REDHAT-BUG-2075821: High severity openjdk 8 vulnerability

Published Apr 15, 2022

Updated

It was discovered that the Libraries component in OpenJDK failed to properly verify ECDSA (Elliptic Curve Digital Signature Algorithm) signatures. A remote attacker could use this flaw to make a Java application compute an invalid signature for arbitrary forged content, thus bypassing the signature verification process.

Affected Software

1 affected component

ORACLE OpenJDK

Event History

Apr 15, 2022

Data Sourced

via Red Hat·01:58 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2075821?

The severity of REDHAT-BUG-2075821 is classified as critical due to the potential for remote exploitation.

How do I fix REDHAT-BUG-2075821?

To fix REDHAT-BUG-2075821, update OpenJDK to the latest stable version where the vulnerability has been addressed.

What are the potential impacts of REDHAT-BUG-2075821?

The potential impacts of REDHAT-BUG-2075821 include arbitrary signature forgery, which could lead to bypassing security measures in Java applications.

Who is affected by REDHAT-BUG-2075821?

Users of Oracle OpenJDK, specifically version 17, are affected by REDHAT-BUG-2075821.

Is there a workaround for REDHAT-BUG-2075821?

Currently, there are no known effective workarounds for REDHAT-BUG-2075821, making updates the recommended action.