In Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a method to execute past the end of bytecode array causing crashes. Eclipse OpenJ9 v0.14.0 correctly detects this case and rejects the attempted class load.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade java-1.8.0-ibm-srcUpgrade java-1.8.0-ibm-webstartUpgrade java-1.7.1-ibm-jdbcUpgrade java-1.8.0-ibm-headlessUpgrade satellite-brandingUpgrade java-1.7.1-ibm-demoUpgrade java-1.7.1-ibmUpgrade java-1.7.1-ibm-srcUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.7.1-ibm-pluginUpgrade java-1.8.0-ibm-pluginUpgrade java-1.8.0-ibmUpgrade satelliteUpgrade java-1.8.0-ibm-develUpgrade java-1.8.0-ibm-demoUpgrade java-1.7.1-ibm-devel | Aug 28, 2019 | Apr 19, 2019 |
| Ibm Aix | — | Apply the fix or workaround for java_apr2019_advisory | Jul 3, 2019 | Apr 19, 2019 |
| Ibm Java | — | Upgrade IBM Java to version 7.1.4.45Upgrade IBM Java to version 8.0.5.35Upgrade IBM Java to version 7.0.10.45 | May 1, 2019 | Apr 19, 2019 |
| Redhat_linux | — | Upgrade java-1.8.0-ibm-webstartUpgrade java-1.7.1-ibm-jdbcUpgrade java-1.7.1-ibm-srcUpgrade java-1.7.1-ibm-develUpgrade java-1.8.0-ibm-srcUpgrade java-1.8.0-ibm-headlessUpgrade java-1.8.0-ibmUpgrade java-1.8.0-ibm-pluginUpgrade java-1.7.1-ibm-pluginUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.7.1-ibmUpgrade java-1.8.0-ibm-develUpgrade java-1.8.0-ibm-demoUpgrade java-1.7.1-ibm-demo | May 15, 2019 | Apr 19, 2019 |
| Suse | — | Upgrade java-1_7_1-ibmUpgrade java-1_8_0-ibm-alsaUpgrade java-1_7_1-ibm-alsaUpgrade java-1_8_0-ibmUpgrade java-1_7_1-ibm-develUpgrade java-1_7_1-ibm-pluginUpgrade java-1_8_0-ibm-develUpgrade java-1_8_0-ibm-pluginUpgrade java-1_7_1-ibm-jdbc | May 22, 2019 | Apr 19, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub