REDHAT-BUG-2160421: Medium severity sun jsse vulnerability

Published Jan 12, 2023

Updated

A flaw was discovered in the DTLS in JSSE component of OpenJDK, allowing malicious clients to make a DTLS server consume excessive resources by repeatedly transmitting a series of handshake initiation requests. The malicious client could also use this flaw to send pre-generated messages with a spoofed source, causing the server to send replies to a victim machine, thus potentially flooding it.

Affected Software

1 affected component

OpenJDK JSSE

Event History

Jan 12, 2023

Data Sourced

via Red Hat·11:28 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2160421?

The severity of REDHAT-BUG-2160421 is considered high due to its potential to exhaust server resources.

What software is affected by REDHAT-BUG-2160421?

The affected software for REDHAT-BUG-2160421 is the DTLS component of OpenJDK's JSSE.

How do I fix REDHAT-BUG-2160421?

To fix REDHAT-BUG-2160421, update your OpenJDK to the latest patched version provided by Red Hat.

Can attackers exploit REDHAT-BUG-2160421 remotely?

Yes, attackers can exploit REDHAT-BUG-2160421 remotely by sending malicious DTLS handshake requests.

What impact does REDHAT-BUG-2160421 have on DTLS servers?

REDHAT-BUG-2160421 causes DTLS servers to consume excessive resources, potentially leading to denial-of-service conditions.