Improper authorization control for web services In java-1.7.0-openjdk
Description
It was discovered that the Hotspot component of OpenJDK did not properly check arguments of the System.arraycopy() function in certain cases. An untrusted Java application or applet could use this flaw to corrupt virtual machine's memory and completely bypass Java sandbox restrictions.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
rpm rhel7 | 1:1.7.0.121-2.6.8.0.el7_3 | ||
rpm rhel7 | 1:1.8.0.111-1.b15.el7_2 | ||
rpm rhel5 | 1:1.6.0.41-1.13.13.1.el5_11 | ||
rpm rhel5 | 1:1.7.0.121-2.6.8.1.el5_11 | ||
rpm rhel6 | 1:1.7.0.121-2.6.8.1.el6_8 | ||
rpm rhel7 | 1:1.6.0.41-1.13.13.1.el7_3 | ||
rpm rhel6 | 1:1.8.0.111-0.b15.el6_8 | ||
rpm rhel6 | 1:1.6.0.41-1.13.13.1.el6_8 |
Aliases
1. 2. 3.