REDHAT-BUG-2187435: High severity openjdk 8 vulnerability

Published Apr 17, 2023

Updated

It was discovered that the TLS implementation in the JSSE component of OpenJDK did not correctly handle half-duplex connections during TLS handshake. A remote attacker attacker could use this flaw to affect confidentiality or integrity of a TLS connection.

Affected Software

1 affected component

ORACLE OpenJDK

Event History

Apr 17, 2023

Data Sourced

via Red Hat·04:39 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2187435?

The severity of REDHAT-BUG-2187435 is considered significant due to its potential impact on the confidentiality and integrity of TLS connections.

How do I fix REDHAT-BUG-2187435?

To fix REDHAT-BUG-2187435, upgrade to the patched versions of OpenJDK that address the TLS handshake vulnerability.

Which versions of OpenJDK are affected by REDHAT-BUG-2187435?

OpenJDK 17 and possibly earlier versions are affected by REDHAT-BUG-2187435.

Can REDHAT-BUG-2187435 be exploited remotely?

Yes, a remote attacker can exploit REDHAT-BUG-2187435 to manipulate TLS connections.

What component is primarily involved in REDHAT-BUG-2187435?

The TLS implementation in the JSSE component of OpenJDK is primarily involved in REDHAT-BUG-2187435.