REDHAT-BUG-2243627: Medium severity openjdk 8 vulnerability
Published Oct 12, 2023
·Updated
A flaw was found in the PKIX certification path validation algorithm in the JSSE component of OpenJDK. A malicious remote client could use this flaw to craft a X.509 certificate and cause denial of service in a Java application processing such certificate.
Affected Software
1 affected component
ORACLE OpenJDK
Event History
Oct 12, 2023
Data Sourced
via Red Hat·09:37 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of REDHAT-BUG-2243627?
The severity of REDHAT-BUG-2243627 is considered critical due to the potential for denial of service.
2
How do I fix REDHAT-BUG-2243627?
To fix REDHAT-BUG-2243627, you should update to the latest version of OpenJDK provided by Oracle that addresses this vulnerability.
3
What products are affected by REDHAT-BUG-2243627?
REDHAT-BUG-2243627 affects OpenJDK 17 from Oracle.
4
What kind of attack does REDHAT-BUG-2243627 enable?
REDHAT-BUG-2243627 enables a remote denial of service attack through crafted X.509 certificates.
5
When was REDHAT-BUG-2243627 reported?
REDHAT-BUG-2243627 was reported as a flaw in the JSSE component of OpenJDK.