REDHAT-BUG-2187758: Low severity openjdk 8 vulnerability

Published Apr 18, 2023

Updated

It was discovered that the implementation of ProcesBuilder in the Libraries component of OpenJDK did not correctly process NULL characters in command name attributes. This could lead to manipulation of command arguments when executing processes with arguments from untrusted sources.

Affected Software

1 affected component

ORACLE OpenJDK

Event History

Apr 18, 2023

Data Sourced

via Red Hat·03:37 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2187758?

The severity of REDHAT-BUG-2187758 is considered high due to its potential to manipulate command arguments from untrusted sources.

How do I fix REDHAT-BUG-2187758?

To fix REDHAT-BUG-2187758, you should upgrade to the latest patched version of OpenJDK.

What systems are affected by REDHAT-BUG-2187758?

REDHAT-BUG-2187758 affects implementations of OpenJDK, specifically OpenJDK 17.

What are the risks associated with REDHAT-BUG-2187758?

The risks associated with REDHAT-BUG-2187758 include potential arbitrary command execution due to improper handling of NULL characters.

Is there a workaround for REDHAT-BUG-2187758?

There is no official workaround for REDHAT-BUG-2187758; upgrading to a patched version is recommended.