In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the source or destination array can, in certain specially crafted code patterns, cause the current method to return prematurely with an undefined return value. This allows whatever value happens to be in the return register at that time to be used as if it matches the method's declared return type.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade java-1.8.0-ibm-demoUpgrade java-1.8.0-ibm-pluginUpgrade java-1.7.1-ibm-develUpgrade java-1.7.1-ibm-srcUpgrade java-1.8.0-ibm-srcUpgrade java-1.8.0-ibm-webstartUpgrade java-1.7.1-ibm-pluginUpgrade java-1.7.1-ibm-demoUpgrade java-1.7.1-ibm-jdbcUpgrade java-1.7.1-ibmUpgrade java-1.8.0-ibmUpgrade java-1.8.0-ibm-develUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.8.0-ibm-headless | Aug 11, 2020 | Jul 15, 2020 |
| Ibm Aix | — | Apply the fix or workaround for java_july2020_advisory | Nov 17, 2020 | Jul 15, 2020 |
| Ibm Java | — | Upgrade IBM Java to version 7.0.10.70Upgrade IBM Java to version 8.0.6.15Upgrade IBM Java to version 7.1.4.70 | Aug 7, 2020 | Jul 15, 2020 |
| Redhat_linux | — | Upgrade java-1.7.1-ibmUpgrade java-1.8.0-ibm-demoUpgrade java-1.7.1-ibm-develUpgrade java-1.7.1-ibm-srcUpgrade java-1.8.0-ibmUpgrade java-1.7.1-ibm-pluginNo solution existsUpgrade java-1.8.0-ibm-headlessUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.8.0-ibm-develUpgrade java-1.7.1-ibm-jdbcUpgrade java-1.8.0-ibm-srcUpgrade java-1.8.0-ibm-pluginUpgrade java-1.8.0-ibm-webstartUpgrade java-1.7.1-ibm-demo | Aug 11, 2020 | Jul 15, 2020 |
| Suse | — | Upgrade java-1_8_0-ibm-pluginUpgrade java-1_7_1-ibm-pluginUpgrade java-1_7_1-ibm-develUpgrade java-1_8_0-ibmUpgrade java-1_7_1-ibmUpgrade java-1_7_1-ibm-jdbcUpgrade java-1_8_0-ibm-alsaUpgrade java-1_8_0-ibm-develUpgrade java-1_7_1-ibm-alsa | Sep 3, 2020 | Jul 15, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub