REDHAT-BUG-2075836: Medium severity openjdk vulnerability

Published Apr 15, 2022

Updated

It was discovered that the AnnotationInvocationHandler class in the Libraries component of OpenJDK did not properly convert an object argument into its textual representation, allowing calls to the overridable toString() method when generating an Exception.

Affected Software

1 affected component

OpenJDK OpenJDK

Event History

Apr 15, 2022

Data Sourced

via Red Hat·03:19 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2075836?

REDHAT-BUG-2075836 has been identified with a moderate severity level, indicating potential issues related to object representation in OpenJDK.

How do I fix REDHAT-BUG-2075836?

To fix REDHAT-BUG-2075836, ensure that you update your OpenJDK to the latest patched version provided by the vendor.

What does REDHAT-BUG-2075836 affect?

REDHAT-BUG-2075836 affects the AnnotationInvocationHandler class in the Libraries component of OpenJDK.

What exploitation methods are linked to REDHAT-BUG-2075836?

REDHAT-BUG-2075836 may allow malicious entities to exploit the system by manipulating the toString() method during Exception generation.

Is there a workaround for REDHAT-BUG-2075836?

Currently, the recommended approach is to apply the available updates rather than rely on a workaround for REDHAT-BUG-2075836.