Sandbox Restrictions Bypass

2019-01-1509:10:40

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.036 Low

EPSS

Percentile

91.8%

JSON

openjdk is vulnerable to sandbox restrictions bypass. An improper type safety check was discovered in the Hotspot component. An untrusted Java application or applet could use this flaw to bypass Java Sandbox restrictions.

CPENameOperatorVersion
java-1.7.0-openjdkeq1.7.0.9__2.3.5.3.el6_3
java-1.7.0-openjdkeq1.7.0.55__2.4.7.1.el6_5
java-1.7.0-openjdkeq1.7.0.45__2.4.3.2.el6_4
java-1.7.0-openjdkeq1.7.0.55__2.4.7.1.el5_10
java-1.7.0-openjdkeq1.7.0.45__2.4.3.4.el6_5
java-1.7.0-openjdkeq1.7.0.85__2.6.1.3.el6_7
java-1.7.0-openjdkeq1.7.0.71__2.5.3.1.el6
java-1.7.0-openjdkeq1.7.0.25__2.3.10.5.el5_9
java-1.7.0-openjdkeq1.7.0.95__2.6.4.0.el6_7
java-1.7.0-openjdkeq1.7.0.51__2.4.4.2.el5_10

Name	Operator	Version
java-1.7.0-openjdk	eq	1.7.0.9__2.3.5.3.el6_3
java-1.7.0-openjdk	eq	1.7.0.55__2.4.7.1.el6_5
java-1.7.0-openjdk	eq	1.7.0.45__2.4.3.2.el6_4
java-1.7.0-openjdk	eq	1.7.0.55__2.4.7.1.el5_10
java-1.7.0-openjdk	eq	1.7.0.45__2.4.3.4.el6_5
java-1.7.0-openjdk	eq	1.7.0.85__2.6.1.3.el6_7
java-1.7.0-openjdk	eq	1.7.0.71__2.5.3.1.el6
java-1.7.0-openjdk	eq	1.7.0.25__2.3.10.5.el5_9
java-1.7.0-openjdk	eq	1.7.0.95__2.6.4.0.el6_7
java-1.7.0-openjdk	eq	1.7.0.51__2.4.4.2.el5_10