vulnerability

Huawei EulerOS: CVE-2016-5547: java-1.7.0-openjdk security update

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:P)
Published
2017-01-27
Added
2017-11-30
Modified
2025-05-05

Description

It was discovered that the Libraries component of OpenJDK did not validate the length of the object identifier read from the DER input before allocating memory to store the OID. An attacker able to make a Java application decode a specially crafted DER input could cause the application to consume an excessive amount of memory.

Solution(s)

huawei-euleros-2_0_sp1-upgrade-java-1.7.0-openjdkhuawei-euleros-2_0_sp1-upgrade-java-1.7.0-openjdk-develhuawei-euleros-2_0_sp1-upgrade-java-1.7.0-openjdk-headless
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.