REDHAT-BUG-2108543: Medium severity microsoft build of openjdk with hotspot vulnerability
It was discovered that the Hotspot component of OpenJDK did not properly restrict access to the invokeBasic() method of the MethodHandle class. An untrusted Java application or applet could use this flaw to bypass Java sandbox restrictions.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2108543?
REDHAT-BUG-2108543 is considered a critical vulnerability because it allows untrusted applications to bypass Java sandbox restrictions.
How do I fix REDHAT-BUG-2108543?
To fix REDHAT-BUG-2108543, update OpenJDK Hotspot to the latest patched version that addresses this vulnerability.
Which versions of OpenJDK Hotspot are affected by REDHAT-BUG-2108543?
REDHAT-BUG-2108543 affects multiple versions of OpenJDK Hotspot, specifically those that do not implement proper restrictions on the invokeBasic() method.
Can REDHAT-BUG-2108543 lead to remote code execution?
Yes, REDHAT-BUG-2108543 can potentially allow an attacker to execute arbitrary code on a user's machine by bypassing the Java sandbox.
Is it safe to run untrusted Java applications with REDHAT-BUG-2108543 present?
No, running untrusted Java applications with REDHAT-BUG-2108543 present poses significant security risks due to the vulnerability's ability to circumvent safety measures.