REDHAT-BUG-2182864
First published: Wed Mar 29 2023(Updated: )
Deserialization of a specially-crafted logging entry involving hashmap or hashtable could cause Denial of Service by exhausting the available memory in the virtual machine. This issue appears to affect only Java 1.6 or older versions.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Java | <1.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2182893
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2182903
- https://access.redhat.com/errata/RHSA-2023:3663
- https://access.redhat.com/security/cve/cve-2023-26464
- https://access.redhat.com/errata/RHSA-2023:5488
- https://access.redhat.com/errata/RHSA-2023:5484
- https://access.redhat.com/errata/RHSA-2023:5485
- https://access.redhat.com/errata/RHSA-2023:5486
- https://access.redhat.com/errata/RHSA-2024:10208
- https://access.redhat.com/errata/RHSA-2024:10207
- https://bugzilla.redhat.com/show_bug.cgi?id=2182864
Frequently Asked Questions
What is the severity of REDHAT-BUG-2182864?
The severity of REDHAT-BUG-2182864 is significant as it leads to Denial of Service by exhausting memory in Java 1.6 or older.
How do I fix REDHAT-BUG-2182864?
To fix REDHAT-BUG-2182864, upgrade to a version of Java newer than 1.6 that does not have this vulnerability.
Which versions of Java are affected by REDHAT-BUG-2182864?
REDHAT-BUG-2182864 affects Oracle Java version 1.6 and older.
What is the nature of the vulnerability in REDHAT-BUG-2182864?
The vulnerability in REDHAT-BUG-2182864 involves deserialization of specially-crafted logging entries that can cause memory exhaustion.
Who is the vendor responsible for REDHAT-BUG-2182864?
The vendor responsible for REDHAT-BUG-2182864 is Oracle for their Java product.
- agent/type
- agent/first-publish-date
- agent/severity
- agent/description
- agent/event
- agent/references
- agent/trending
- agent/source
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- agent/last-modified-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2023-26464
- vendor/oracle
- canonical/oracle java