REDHAT-BUG-2221647: Medium severity OpenJDK Libraries vulnerability

Published Jul 10, 2023

Updated

It was discovered that the UnixUriUtils class in the Libraries component of OpenJDK failed to sanitize strings containing slash characters when converting URIs to file system paths. An untrusted Java application or applet could use this flaw to bypass certain Java sandbox restrictions by creating Path objects with invalid paths.

Affected Software

1 affected component

OpenJDK Libraries

Event History

Jul 10, 2023

Data Sourced

via Red Hat·01:44 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2221647?

The severity of REDHAT-BUG-2221647 is classified as critical due to its potential for bypassing Java sandbox restrictions.

How do I fix REDHAT-BUG-2221647?

To fix REDHAT-BUG-2221647, it is recommended to update to the latest version of OpenJDK Libraries that addresses the vulnerability.

What are the implications of exploiting REDHAT-BUG-2221647?

Exploiting REDHAT-BUG-2221647 could allow an untrusted Java application to bypass security measures and access restricted resources.

Who is affected by REDHAT-BUG-2221647?

Users of the OpenJDK Libraries component are primarily affected by the vulnerabilities described in REDHAT-BUG-2221647.

Is there a patch available for REDHAT-BUG-2221647?

Yes, patches for REDHAT-BUG-2221647 are available and users should apply them to mitigate the vulnerability.