CVE-2017-10053

Impact:
Low
Public Date:
2017-07-18
CWE:
CWE-770
Bugzilla:
1471889: CVE-2017-10053 OpenJDK: reading of unprocessed image data in JPEGImageReader (2D, 8169209)
It was discovered that the JPEGImageReader implementation in the 2D component of OpenJDK would, in certain cases, read all image data even if it was not used later. A specially crafted image could cause a Java application to temporarily use an excessive amount of CPU and memory.

Find out more about CVE-2017-10053 from the MITRE CVE dictionary dictionary and NIST NVD.

CVSS v3 metrics

CVSS3 Base Score 5.3
CVSS3 Base Metrics CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality None
Integrity Impact None
Availability Impact Low

Red Hat Security Errata

Platform Errata Release Date
Red Hat Enterprise Linux 6 (java-1.7.0-openjdk) RHSA-2017:2424 2017-08-07
Red Hat Enterprise Linux Supplementary (v. 6) (java-1.7.1-ibm) RHSA-2017:2481 2017-08-15
Red Hat Enterprise Linux Supplementary (v. 6) (java-1.8.0-ibm) RHSA-2017:2469 2017-08-14
Red Hat Enterprise Linux 6 (java-1.8.0-openjdk) RHSA-2017:1789 2017-07-20
Oracle Java for Red Hat Enterprise Linux 6 (java-1.7.0-oracle) RHSA-2017:1791 2017-07-20
Oracle Java for Red Hat Enterprise Linux 6 (java-1.8.0-oracle) RHSA-2017:1790 2017-07-20
Oracle Java for Red Hat Enterprise Linux 6 (java-1.6.0-sun) RHSA-2017:1792 2017-07-20
Oracle Java for Red Hat Enterprise Linux 7 (java-1.6.0-sun) RHSA-2017:1792 2017-07-20
Red Hat Enterprise Linux 7 (java-1.7.0-openjdk) RHSA-2017:2424 2017-08-07
Red Hat Enterprise Linux 7 (java-1.8.0-openjdk) RHSA-2017:1789 2017-07-20
Red Hat Enterprise Linux Supplementary (v. 6) (java-1.6.0-ibm) RHSA-2017:2530 2017-08-23
Red Hat Enterprise Linux Supplementary (v. 7) (java-1.7.1-ibm) RHSA-2017:2481 2017-08-15
Red Hat Enterprise Linux Supplementary (v. 7) (java-1.8.0-ibm) RHSA-2017:2469 2017-08-14
Red Hat Satellite 5.8 (RHEL v.6) (java-1.8.0-ibm) RHSA-2017:3453 2017-12-13
Oracle Java for Red Hat Enterprise Linux 7 (java-1.8.0-oracle) RHSA-2017:1790 2017-07-20
Oracle Java for Red Hat Enterprise Linux 7 (java-1.7.0-oracle) RHSA-2017:1791 2017-07-20

Affected Packages State

Platform Package State
Red Hat Satellite 5 java-1.7.1-ibm Affected

Last Modified
Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.