In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the source or destination array can, in certain specially crafted code patterns, cause the current method to return prematurely with an undefined return value. This allows whatever value happens to be in the return register at that time to be used as if it matches the method's declared return type.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade java-1.8.0-ibmUpgrade java-1.8.0-ibm-develUpgrade java-1.7.1-ibmUpgrade java-1.8.0-ibm-headlessUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.7.1-ibm-demoUpgrade java-1.7.1-ibm-jdbcUpgrade java-1.7.1-ibm-pluginUpgrade java-1.7.1-ibm-srcUpgrade java-1.8.0-ibm-pluginUpgrade java-1.7.1-ibm-develUpgrade java-1.8.0-ibm-srcUpgrade java-1.8.0-ibm-demoUpgrade java-1.8.0-ibm-webstart | Aug 11, 2020 | Jul 15, 2020 |
| Ibm Aix | — | Apply the fix or workaround for java_july2020_advisory | Nov 17, 2020 | Jul 15, 2020 |
| Ibm Java | — | Upgrade IBM Java to version 8.0.6.15Upgrade IBM Java to version 7.1.4.70Upgrade IBM Java to version 7.0.10.70 | Aug 7, 2020 | Jul 15, 2020 |
| Redhat_linux | — | Upgrade java-1.8.0-ibm-jdbcUpgrade java-1.8.0-ibm-headlessUpgrade java-1.7.1-ibm-develUpgrade java-1.8.0-ibm-demoUpgrade java-1.7.1-ibm-srcUpgrade java-1.8.0-ibm-develUpgrade java-1.8.0-ibmUpgrade java-1.7.1-ibm-pluginUpgrade java-1.7.1-ibmNo solution existsUpgrade java-1.7.1-ibm-jdbcUpgrade java-1.7.1-ibm-demoUpgrade java-1.8.0-ibm-pluginUpgrade java-1.8.0-ibm-srcUpgrade java-1.8.0-ibm-webstart | Aug 11, 2020 | Jul 15, 2020 |
| Suse | — | Upgrade java-1_8_0-ibmUpgrade java-1_8_0-ibm-pluginUpgrade java-1_7_1-ibm-develUpgrade java-1_7_1-ibm-pluginUpgrade java-1_8_0-ibm-alsaUpgrade java-1_7_1-ibm-jdbcUpgrade java-1_8_0-ibm-develUpgrade java-1_7_1-ibm-alsaUpgrade java-1_7_1-ibm | Sep 3, 2020 | Jul 15, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub