REDHAT-BUG-2187802: Low severity OpenJDK Libraries vulnerability

Published Apr 18, 2023

Updated

It was discovered that the UnixUriUtils class in the Libraries component of OpenJDK failed to sanitize strings containing slash characters when converting URIs to file system paths. An untrusted Java application or applet could use this flaw to bypass certain Java sandbox restrictions by creating Path objects with invalid paths.

Affected Software

1 affected component

OpenJDK Libraries

Event History

Apr 18, 2023

Data Sourced

via Red Hat·05:21 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2187802?

The severity of REDHAT-BUG-2187802 is considered high due to the potential bypass of Java sandbox restrictions.

How do I fix REDHAT-BUG-2187802?

To fix REDHAT-BUG-2187802, ensure you update to the latest version of OpenJDK Libraries that includes the necessary patches.

Who is affected by REDHAT-BUG-2187802?

Untrusted Java applications or applets running on OpenJDK Libraries are affected by REDHAT-BUG-2187802.

What is the nature of the vulnerability in REDHAT-BUG-2187802?

The nature of the vulnerability in REDHAT-BUG-2187802 involves improper sanitization of strings with slash characters in URIs.

Can REDHAT-BUG-2187802 lead to security risks?

Yes, REDHAT-BUG-2187802 can lead to security risks by allowing untrusted applications to manipulate file system paths.