vulnerability
Huawei EulerOS: CVE-2016-5547: java-1.7.0-openjdk security update
Severity | CVSS | Published | Added | Modified |
---|---|---|---|---|
5 | (AV:N/AC:L/Au:N/C:N/I:N/A:P) | 2017-01-27 | 2017-11-30 | 2025-05-05 |
Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:P)
Published
2017-01-27
Added
2017-11-30
Modified
2025-05-05
Description
It was discovered that the Libraries component of OpenJDK did not validate the length of the object identifier read from the DER input before allocating memory to store the OID. An attacker able to make a Java application decode a specially crafted DER input could cause the application to consume an excessive amount of memory.
Solution(s)
huawei-euleros-2_0_sp1-upgrade-java-1.7.0-openjdkhuawei-euleros-2_0_sp1-upgrade-java-1.7.0-openjdk-develhuawei-euleros-2_0_sp1-upgrade-java-1.7.0-openjdk-headless

NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.