In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the source or destination array can, in certain specially crafted code patterns, cause the current method to return prematurely with an undefined return value. This allows whatever value happens to be in the return register at that time to be used as if it matches the method's declared return type.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade java-1.7.1-ibm-srcUpgrade java-1.8.0-ibm-pluginUpgrade java-1.8.0-ibm-srcUpgrade java-1.7.1-ibm-develUpgrade java-1.8.0-ibm-demoUpgrade java-1.8.0-ibm-webstartUpgrade java-1.8.0-ibmUpgrade java-1.7.1-ibmUpgrade java-1.8.0-ibm-headlessUpgrade java-1.7.1-ibm-demoUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.8.0-ibm-develUpgrade java-1.7.1-ibm-jdbcUpgrade java-1.7.1-ibm-plugin | Aug 11, 2020 | Jul 15, 2020 |
| Ibm Aix | — | Apply the fix or workaround for java_july2020_advisory | Nov 17, 2020 | Jul 15, 2020 |
| Ibm Java | — | Upgrade IBM Java to version 7.0.10.70Upgrade IBM Java to version 7.1.4.70Upgrade IBM Java to version 8.0.6.15 | Aug 7, 2020 | Jul 15, 2020 |
| Redhat_linux | — | Upgrade java-1.8.0-ibm-jdbcUpgrade java-1.8.0-ibm-headlessUpgrade java-1.8.0-ibmUpgrade java-1.8.0-ibm-develUpgrade java-1.7.1-ibm-pluginUpgrade java-1.7.1-ibm-srcNo solution existsUpgrade java-1.7.1-ibmUpgrade java-1.7.1-ibm-develUpgrade java-1.8.0-ibm-demoUpgrade java-1.8.0-ibm-srcUpgrade java-1.8.0-ibm-pluginUpgrade java-1.7.1-ibm-jdbcUpgrade java-1.8.0-ibm-webstartUpgrade java-1.7.1-ibm-demo | Aug 11, 2020 | Jul 15, 2020 |
| Suse | — | Upgrade java-1_7_1-ibmUpgrade java-1_7_1-ibm-jdbcUpgrade java-1_8_0-ibm-develUpgrade java-1_8_0-ibm-alsaUpgrade java-1_7_1-ibm-alsaUpgrade java-1_8_0-ibm-pluginUpgrade java-1_8_0-ibmUpgrade java-1_7_1-ibm-pluginUpgrade java-1_7_1-ibm-devel | Sep 3, 2020 | Jul 15, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub