CVE:CVE-2015-3149
CNNVD:CNNVD-201507-670
OpenJDK是OpenJDK开源的一个 Java 的开发环境的开源版本。
OpenJDK存在后置链接漏洞。本地攻击者可借助符号链接利用该漏洞写入到任意文件。
solution:Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_hpc_node to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_hpc_node_eus to a higher version than 7.1,and avoid the version 7.1; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 6.6,and avoid the version 6.6; Upgrade redhat enterprise_linux_server_eus to a higher version than 6.6z,7.1,and avoid the version 6.6z,7.1; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0