REDHAT-BUG-2221645: Low severity openjdk vulnerability

Published Jul 10, 2023

Updated

A flaw was found in the way the Hotspot component of OpenJDK handled array accesses in case of overflow in the index computation. This flaw could lead to an access at an invalid array position, leading to an out-of-bounds read vulnerability.

Affected Software

1 affected component

OpenJDK OpenJDK

Event History

Jul 10, 2023

Data Sourced

via Red Hat·01:32 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2221645?

The severity of REDHAT-BUG-2221645 is considered medium due to the potential for out-of-bounds read vulnerabilities.

How do I fix REDHAT-BUG-2221645?

To fix REDHAT-BUG-2221645, apply the recommended patches or updates provided by the OpenJDK maintainers.

Which versions of OpenJDK are affected by REDHAT-BUG-2221645?

All versions of OpenJDK that include the vulnerable Hotspot component are affected by REDHAT-BUG-2221645.

Is there a workaround for REDHAT-BUG-2221645?

A definitive workaround for REDHAT-BUG-2221645 is to avoid using features that rely on the vulnerable array index accesses.

How does REDHAT-BUG-2221645 impact application security?

REDHAT-BUG-2221645 may lead to unauthorized data access through out-of-bounds reads, compromising application security.