In Eclipse OpenJ9 version 0.11.0, the OpenJ9 JIT compiler may incorrectly omit a null check on the receiver object of an Unsafe call when accelerating it.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade java-1.8.0-ibm-develUpgrade java-1.8.0-ibmUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.8.0-ibm-pluginUpgrade satelliteUpgrade java-1.8.0-ibm-demoUpgrade java-1.8.0-ibm-srcUpgrade satellite-brandingUpgrade java-1.8.0-ibm-headlessUpgrade java-1.8.0-ibm-webstart | Aug 28, 2019 | Feb 11, 2019 |
| Ibm Aix | — | Apply the fix or workaround for java_jan2019_advisory | Apr 23, 2019 | Feb 11, 2019 |
| Ibm Java | — | Upgrade IBM Java to version 8.0.5.30 | Oct 20, 2026 | Oct 20, 2026 |
| Redhat_linux | — | Upgrade java-1.8.0-ibm-srcUpgrade java-1.8.0-ibm-pluginUpgrade java-1.8.0-ibm-webstartUpgrade java-1.8.0-ibmUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.8.0-ibm-headlessUpgrade java-1.8.0-ibm-develUpgrade java-1.8.0-ibm-demo | Mar 7, 2019 | Feb 11, 2019 |
| Suse | — | Upgrade java-1_8_0-ibm-pluginUpgrade java-1_8_0-ibm-develUpgrade java-1_8_0-ibm-alsaUpgrade java-1_8_0-ibm | Dec 19, 2019 | Feb 11, 2019 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub