[월:] 2017년 07월

USN-3366-1: OpenJDK 8 vulnerabilities Ubuntu Security Notice USN-3366-1 26th July, 2017 openjdk-8 vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 17.04 Ubuntu 16.04 LTS Summary Several security issues were fixed in OpenJDK 8. Software description openjdk-8 – Open Source Java implementation Details It was discovered that the JPEGImageReader class in OpenJDK wouldincorrectly read unused image data. An attacker could use this tospecially construct a jpeg image file that when opened by a Javaapplication would cause a denial of service. (CVE-2017-10053) It was discovered that the JAR verifier in OpenJDK did not properlyhandle archives containing files missing digests. An attacker coulduse this to modify the signed contents of a JAR file. (CVE-2017-10067) It was discovered that integer overflows existed in the Hotspotcomponent of OpenJDK when generating range check loop predicates. Anattacker could use this to specially [ more… ]