Bug 1567537 – CVE-2018-2815 OpenJDK: unbounded memory allocation during deserialization in StubIORImpl (Serialization, 8192757)

Bugzilla will be upgraded to version 5.0 on a still to be determined date in the near future. The original upgrade date has been delayed.

Bug 1567537 - (CVE-2018-2815) CVE-2018-2815 OpenJDK: unbounded memory allocation during deserialization in StubIORImpl (Serialization, 8192757)

Summary:	CVE-2018-2815 OpenJDK: unbounded memory allocation during deserialization in ...

Status:	CLOSED ERRATA

Aliases:	CVE-2018-2815

Product:	Security Response
Classification:	Other
Component:	vulnerability (Show other bugs)
Sub Component:
Version:	unspecified
Hardware:	All Linux

Priority	medium Severity medium
Target Milestone:	---
Target Release:	---
Assigned To:	Red Hat Product Security
QA Contact:
Docs Contact:

URL:
Whiteboard:	impact=moderate,public=20180417,repor...
Keywords:	Security

Depends On:	1559768 1559769 1559770 1559771 1559773 1559774 1559775 1559776 1565346 1565347 1565348 1565349 1565350 1565351 1565352 1565353 1565511 1565512 1565513 1565514
Blocks:	1559778
	Show dependency tree / graph

Reported:	2018-04-14 15:53 EDT by Tomas Hoger
Modified:	2018-05-03 08:28 EDT (History)
CC List:	3 users (show)

See Also:
Fixed In Version:
Doc Type:	If docs needed, set a value
Doc Text:
Story Points:	---
Clone Of:
Environment:
Last Closed:	2018-05-03 08:28:01 EDT
Type:	---
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

External Trackers
Tracker	ID	Priority	Status	Summary	Last Updated
Red Hat Product Errata	RHSA-2018:1188	None	None	None	2018-04-19 13:00 EDT
Red Hat Product Errata	RHSA-2018:1191	None	None	None	2018-04-19 14:01 EDT
Red Hat Product Errata	RHSA-2018:1201	None	None	None	2018-04-23 13:12 EDT
Red Hat Product Errata	RHSA-2018:1202	None	None	None	2018-04-23 13:15 EDT
Red Hat Product Errata	RHSA-2018:1203	None	None	None	2018-04-23 13:20 EDT
Red Hat Product Errata	RHSA-2018:1204	None	None	None	2018-04-23 13:17 EDT
Red Hat Product Errata	RHSA-2018:1205	None	None	None	2018-04-23 13:22 EDT
Red Hat Product Errata	RHSA-2018:1206	None	None	None	2018-04-23 13:30 EDT
Red Hat Product Errata	RHSA-2018:1270	None	None	None	2018-04-30 12:17 EDT
Red Hat Product Errata	RHSA-2018:1278	None	None	None	2018-05-02 18:06 EDT

Groups: None (edit)

Description Tomas Hoger 2018-04-14 15:53:01 EDT

It was discovered that the implementation of the StubIORImpl class in the Serialization component of OpenJDK did not limit the amount of memory allocated when creating object instance from a serialized form.  A specially-crafted input could cause a Java application to use an excessive amount of memory when deserialized.

Comment 1 Tomas Hoger 2018-04-17 16:52:38 EDT

Public now via Oracle CPU April 2018:

http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA

The issue was fixed in Oracle JDK 10.0.1, 8u171, 7u181, and 6u191.

Comment 2 errata-xmlrpc 2018-04-19 13:00:14 EDT

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 6

Via RHSA-2018:1188 https://access.redhat.com/errata/RHSA-2018:1188

Comment 3 errata-xmlrpc 2018-04-19 14:00:55 EDT

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 7

Via RHSA-2018:1191 https://access.redhat.com/errata/RHSA-2018:1191

Comment 4 Tomas Hoger 2018-04-20 16:46:03 EDT

OpenJDK-8 upstream commit:

http://hg.openjdk.java.net/jdk8u/jdk8u/corba/rev/b90a8fc589af
http://hg.openjdk.java.net/jdk8u/jdk8u/jdk/rev/d1ff85e2e682

Comment 5 errata-xmlrpc 2018-04-23 13:12:09 EDT

This issue has been addressed in the following products:

  Oracle Java for Red Hat Enterprise Linux 7

Via RHSA-2018:1201 https://access.redhat.com/errata/RHSA-2018:1201

Comment 6 errata-xmlrpc 2018-04-23 13:15:18 EDT

This issue has been addressed in the following products:

  Oracle Java for Red Hat Enterprise Linux 6

Via RHSA-2018:1202 https://access.redhat.com/errata/RHSA-2018:1202

Comment 7 errata-xmlrpc 2018-04-23 13:17:50 EDT

This issue has been addressed in the following products:

  Oracle Java for Red Hat Enterprise Linux 7

Via RHSA-2018:1204 https://access.redhat.com/errata/RHSA-2018:1204

Comment 8 errata-xmlrpc 2018-04-23 13:20:18 EDT

This issue has been addressed in the following products:

  Oracle Java for Red Hat Enterprise Linux 6

Via RHSA-2018:1203 https://access.redhat.com/errata/RHSA-2018:1203

Comment 9 errata-xmlrpc 2018-04-23 13:22:23 EDT

This issue has been addressed in the following products:

  Oracle Java for Red Hat Enterprise Linux 7

Via RHSA-2018:1205 https://access.redhat.com/errata/RHSA-2018:1205

Comment 10 errata-xmlrpc 2018-04-23 13:30:16 EDT

This issue has been addressed in the following products:

  Oracle Java for Red Hat Enterprise Linux 6

Via RHSA-2018:1206 https://access.redhat.com/errata/RHSA-2018:1206

Comment 11 errata-xmlrpc 2018-04-30 12:17:32 EDT

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 6

Via RHSA-2018:1270 https://access.redhat.com/errata/RHSA-2018:1270

Comment 12 errata-xmlrpc 2018-05-02 18:06:26 EDT

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 7

Via RHSA-2018:1278 https://access.redhat.com/errata/RHSA-2018:1278

Note You need to log in before you can comment on or make changes to this bug.