Improper resource allocation In java-1.6.0-openjdk
Description
It was discovered that the JAXP component in OpenJDK did not properly enforce the totalEntitySizeLimit limit. An attacker able to make a Java application process a specially crafted XML file could use this flaw to make the application consume an excessive amount of memory.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 rpm rhel6 | 1:1.6.0.38-1.13.10.0.el6_7 | ||
rpm rhel5 | 1:1.7.0.95-2.6.4.1.el5_11 | ||
rpm rhel5 | 1:1.6.0.38-1.13.10.0.el5_11 | ||
rpm rhel7 | 1:1.6.0.38-1.13.10.0.el7_2 | ||
rpm rhel6 | 1:1.7.0.95-2.6.4.0.el6_7 | ||
rpm rhel7 | 1:1.7.0.95-2.6.4.0.el7_2 | ||
rpm rhel6 | 1:1.8.0.71-1.b15.el6_7 | ||
rpm rhel7 | 1:1.8.0.71-2.b15.el7_2 |
Aliases
1. 2. 3.