In Eclipse OpenJ9, prior to the 0.12.0 release, the jio_snprintf() and jio_vsnprintf() native methods ignored the length parameter. This affects existing APIs that called the functions to exceed the allocated buffer. This functions were not directly callable by non-native user code.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade java-1.7.1-ibm-srcUpgrade java-1.8.0-ibm-srcUpgrade java-1.7.1-ibm-develUpgrade java-1.8.0-ibm-pluginUpgrade satelliteUpgrade java-1.8.0-ibm-headlessUpgrade java-1.7.1-ibm-jdbcUpgrade java-1.7.1-ibm-demoUpgrade java-1.8.0-ibm-webstartUpgrade java-1.8.0-ibm-demoUpgrade java-1.8.0-ibm-develUpgrade java-1.7.1-ibmUpgrade java-1.7.1-ibm-pluginUpgrade satellite-brandingUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.8.0-ibm | Aug 28, 2019 | Feb 11, 2019 |
| Ibm Aix | — | Apply the fix or workaround for java_jan2019_advisory | Apr 23, 2019 | Feb 11, 2019 |
| Ibm Java | — | Upgrade IBM Java to version 7.1.4.40Upgrade IBM Java to version 7.0.10.40Upgrade IBM Java to version 8.0.5.30 | Oct 20, 2026 | Oct 20, 2026 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Aug 27, 2019 | Aug 27, 2019 |
| Redhat_linux | — | Upgrade java-1.8.0-ibm-jdbcUpgrade java-1.8.0-ibm-headlessUpgrade java-1.8.0-ibm-demoUpgrade java-1.8.0-ibm-develUpgrade java-1.8.0-ibmUpgrade java-1.8.0-ibm-pluginUpgrade java-1.8.0-ibm-webstartUpgrade java-1.8.0-ibm-src | Mar 7, 2019 | Feb 11, 2019 |
| Suse | — | Upgrade java-1_8_0-ibm-develUpgrade java-1_8_0-ibm-pluginUpgrade java-1_7_1-ibm-develUpgrade java-1_7_1-ibm-jdbcUpgrade java-1_8_0-ibm-alsaUpgrade java-1_7_1-ibm-pluginUpgrade java-1_7_1-ibm-alsaUpgrade java-1_7_1-ibmUpgrade java-1_8_0-ibm | Dec 19, 2019 | Feb 11, 2019 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub