In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the source or destination array can, in certain specially crafted code patterns, cause the current method to return prematurely with an undefined return value. This allows whatever value happens to be in the return register at that time to be used as if it matches the method's declared return type.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade java-1.7.1-ibm-pluginUpgrade java-1.8.0-ibm-headlessUpgrade java-1.7.1-ibm-jdbcUpgrade java-1.7.1-ibm-demoUpgrade java-1.8.0-ibmUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.8.0-ibm-develUpgrade java-1.7.1-ibmUpgrade java-1.8.0-ibm-webstartUpgrade java-1.8.0-ibm-demoUpgrade java-1.8.0-ibm-srcUpgrade java-1.7.1-ibm-develUpgrade java-1.8.0-ibm-pluginUpgrade java-1.7.1-ibm-src | Aug 11, 2020 | Jul 15, 2020 |
| Ibm Aix | — | Apply the fix or workaround for java_july2020_advisory | Nov 17, 2020 | Jul 15, 2020 |
| Ibm Java | — | Upgrade IBM Java to version 7.1.4.70Upgrade IBM Java to version 8.0.6.15Upgrade IBM Java to version 7.0.10.70 | Aug 7, 2020 | Jul 15, 2020 |
| Redhat_linux | — | No solution existsUpgrade java-1.7.1-ibm-develUpgrade java-1.7.1-ibm-srcUpgrade java-1.7.1-ibm-pluginUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.7.1-ibmUpgrade java-1.8.0-ibm-headlessUpgrade java-1.8.0-ibmUpgrade java-1.8.0-ibm-demoUpgrade java-1.8.0-ibm-develUpgrade java-1.8.0-ibm-webstartUpgrade java-1.7.1-ibm-demoUpgrade java-1.8.0-ibm-srcUpgrade java-1.7.1-ibm-jdbcUpgrade java-1.8.0-ibm-plugin | Aug 11, 2020 | Jul 15, 2020 |
| Suse | — | Upgrade java-1_7_1-ibmUpgrade java-1_7_1-ibm-alsaUpgrade java-1_8_0-ibm-alsaUpgrade java-1_8_0-ibm-develUpgrade java-1_7_1-ibm-jdbcUpgrade java-1_8_0-ibm-pluginUpgrade java-1_7_1-ibm-develUpgrade java-1_7_1-ibm-pluginUpgrade java-1_8_0-ibm | Sep 3, 2020 | Jul 15, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub