Improper resource allocation In java-1.8.0-openjdk
Description
It was discovered that the Libraries component of OpenJDK failed to sufficiently limit the amount of memory allocated when reading DER encoded input. A remote attacker could possibly use this flaw to make a Java application use an excessive amount of memory if it parsed attacker supplied DER encoded input.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 rpm rhel7 | 1:1.8.0.161-0.b14.el7_4 | ||
rpm rhel6 | - | - | |
rpm rhel6 | 1:1.8.0.161-3.b14.el6_9 | ||
rpm rhel7 | 1:1.7.0.171-2.6.13.0.el7_4 | ||
rpm rhel6 | 1:1.7.0.171-2.6.13.0.el6_9 |
Aliases
1. 2. 3.