CVE-2013-2035: Race condition in hawtjni-runtime/src/main/java/org/fusesource/hawtjni/runtime/Library.java in HawtJNI befo...

Security readout for executives and security teams

CVE-2013-2035 is a local attack issue in HawtJNI before 1.8. If software uses the vulnerable library without a custom library path, a local user may abuse a temporary JAR file race condition to run arbitrary Java code. This is mainly a shared-system or privilege-boundary risk, not a remote internet exposure by itself. Systems are likely exposed only where applications bundle or depend on HawtJNI before 1.8 and run on hosts accessible to untrusted local users. Downstream Java tools may include HawtJNI, but the provided data does not enumerate all affected products. Treat as a targeted remediation item for legacy Java stacks, especially on shared Linux systems. It is not evidenced as remotely exploitable or actively exploited, but it can cross local privilege boundaries when vulnerable software runs with elevated trust. Mitigation focus: Upgrade HawtJNI to version 1.8 or later where directly used.; Apply relevant vendor updates for packaged software that includes HawtJNI.; Check Red Hat advisories if using affected Red Hat-distributed packages..

Prepared

Jun 14, 2026, 16:12 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.