In Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a method to execute past the end of bytecode array causing crashes. Eclipse OpenJ9 v0.14.0 correctly detects this case and rejects the attempted class load.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade java-1.7.1-ibm-jdbcUpgrade java-1.8.0-ibm-webstartUpgrade java-1.7.1-ibm-demoUpgrade java-1.8.0-ibm-headlessUpgrade java-1.8.0-ibm-srcUpgrade satellite-brandingUpgrade java-1.8.0-ibm-pluginUpgrade java-1.7.1-ibm-develUpgrade satelliteUpgrade java-1.7.1-ibm-srcUpgrade java-1.8.0-ibm-demoUpgrade java-1.8.0-ibmUpgrade java-1.7.1-ibm-pluginUpgrade java-1.8.0-ibm-develUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.7.1-ibm | Aug 28, 2019 | Apr 19, 2019 |
| Ibm Aix | — | Apply the fix or workaround for java_apr2019_advisory | Jul 3, 2019 | Apr 19, 2019 |
| Ibm Java | — | Upgrade IBM Java to version 7.0.10.45Upgrade IBM Java to version 8.0.5.35Upgrade IBM Java to version 7.1.4.45 | Oct 20, 2026 | Oct 20, 2026 |
| Redhat_linux | — | Upgrade java-1.8.0-ibm-srcUpgrade java-1.7.1-ibm-jdbcUpgrade java-1.7.1-ibm-develUpgrade java-1.8.0-ibm-webstartUpgrade java-1.8.0-ibm-headlessUpgrade java-1.7.1-ibm-srcUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.7.1-ibmUpgrade java-1.8.0-ibm-develUpgrade java-1.8.0-ibm-pluginUpgrade java-1.7.1-ibm-demoUpgrade java-1.7.1-ibm-pluginUpgrade java-1.8.0-ibm-demoUpgrade java-1.8.0-ibm | May 15, 2019 | Apr 19, 2019 |
| Suse | — | Upgrade java-1_8_0-ibm-alsaUpgrade java-1_7_1-ibmUpgrade java-1_8_0-ibmUpgrade java-1_7_1-ibm-alsaUpgrade java-1_7_1-ibm-pluginUpgrade java-1_7_1-ibm-develUpgrade java-1_8_0-ibm-pluginUpgrade java-1_8_0-ibm-develUpgrade java-1_7_1-ibm-jdbc | May 22, 2019 | Apr 19, 2019 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub