In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the source or destination array can, in certain specially crafted code patterns, cause the current method to return prematurely with an undefined return value. This allows whatever value happens to be in the return register at that time to be used as if it matches the method's declared return type.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade java-1.8.0-ibm-develUpgrade java-1.7.1-ibmUpgrade java-1.8.0-ibm-headlessUpgrade java-1.7.1-ibm-pluginUpgrade java-1.8.0-ibmUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.7.1-ibm-demoUpgrade java-1.7.1-ibm-jdbcUpgrade java-1.8.0-ibm-pluginUpgrade java-1.7.1-ibm-develUpgrade java-1.8.0-ibm-demoUpgrade java-1.8.0-ibm-srcUpgrade java-1.7.1-ibm-srcUpgrade java-1.8.0-ibm-webstart | Aug 11, 2020 | Jul 15, 2020 |
| Ibm Aix | — | Apply the fix or workaround for java_july2020_advisory | Nov 17, 2020 | Jul 15, 2020 |
| Ibm Java | — | Upgrade IBM Java to version 7.0.10.70Upgrade IBM Java to version 7.1.4.70Upgrade IBM Java to version 8.0.6.15 | Aug 7, 2020 | Jul 15, 2020 |
| Redhat_linux | — | Upgrade java-1.7.1-ibmUpgrade java-1.8.0-ibmUpgrade java-1.8.0-ibm-develUpgrade java-1.7.1-ibm-develUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.8.0-ibm-headlessNo solution existsUpgrade java-1.7.1-ibm-srcUpgrade java-1.8.0-ibm-demoUpgrade java-1.7.1-ibm-pluginUpgrade java-1.7.1-ibm-jdbcUpgrade java-1.7.1-ibm-demoUpgrade java-1.8.0-ibm-pluginUpgrade java-1.8.0-ibm-webstartUpgrade java-1.8.0-ibm-src | Aug 11, 2020 | Jul 15, 2020 |
| Suse | — | Upgrade java-1_7_1-ibmUpgrade java-1_8_0-ibm-develUpgrade java-1_7_1-ibm-jdbcUpgrade java-1_7_1-ibm-alsaUpgrade java-1_8_0-ibm-alsaUpgrade java-1_8_0-ibmUpgrade java-1_8_0-ibm-pluginUpgrade java-1_7_1-ibm-pluginUpgrade java-1_7_1-ibm-devel | Sep 3, 2020 | Jul 15, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub