In Eclipse OpenJ9 version 0.11.0, the OpenJ9 JIT compiler may incorrectly omit a null check on the receiver object of an Unsafe call when accelerating it.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade java-1.8.0-ibm-srcUpgrade java-1.8.0-ibm-webstartUpgrade java-1.8.0-ibm-headlessUpgrade satellite-brandingUpgrade java-1.8.0-ibmUpgrade java-1.8.0-ibm-develUpgrade satelliteUpgrade java-1.8.0-ibm-demoUpgrade java-1.8.0-ibm-pluginUpgrade java-1.8.0-ibm-jdbc | Aug 28, 2019 | Feb 11, 2019 |
| Ibm Aix | — | Apply the fix or workaround for java_jan2019_advisory | Apr 23, 2019 | Feb 11, 2019 |
| Ibm Java | — | Upgrade IBM Java to version 8.0.5.30 | Mar 12, 2019 | Feb 11, 2019 |
| Redhat_linux | — | Upgrade java-1.8.0-ibm-webstartUpgrade java-1.8.0-ibm-pluginUpgrade java-1.8.0-ibm-srcUpgrade java-1.8.0-ibm-demoUpgrade java-1.8.0-ibmUpgrade java-1.8.0-ibm-develUpgrade java-1.8.0-ibm-headlessUpgrade java-1.8.0-ibm-jdbc | Mar 7, 2019 | Feb 11, 2019 |
| Suse | — | Upgrade java-1_8_0-ibm-pluginUpgrade java-1_8_0-ibm-develUpgrade java-1_8_0-ibm-alsaUpgrade java-1_8_0-ibm | Dec 19, 2019 | Feb 11, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub