Name: CVE-2019-17639: Access of Resource Using Incompatible Type
Creator: Rapid7
Published: 2020-07-15T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2019-17639, CWE-843, CVSS 5.3, EPSS 0.01504

In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the source or destination array can, in certain specially crafted code patterns, cause the current method to return prematurely with an undefined return value. This allows whatever value happens to be in the return register at that time to be used as if it matches the method's declared return type.

CVSS Details

CVSS 3.1 Base Score: 5.3
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Centos_linux	—	Upgrade java-1.8.0-ibm-pluginUpgrade java-1.8.0-ibm-demoUpgrade java-1.8.0-ibm-srcUpgrade java-1.8.0-ibm-webstartUpgrade java-1.7.1-ibm-develUpgrade java-1.7.1-ibm-srcUpgrade java-1.7.1-ibm-jdbcUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.8.0-ibm-develUpgrade java-1.7.1-ibm-pluginUpgrade java-1.8.0-ibmUpgrade java-1.7.1-ibm-demoUpgrade java-1.7.1-ibmUpgrade java-1.8.0-ibm-headless	Aug 11, 2020	Jul 15, 2020
Ibm Aix	—	Apply the fix or workaround for java_july2020_advisory	Nov 17, 2020	Jul 15, 2020
Ibm Java	—	Upgrade IBM Java to version 8.0.6.15Upgrade IBM Java to version 7.0.10.70Upgrade IBM Java to version 7.1.4.70	Aug 7, 2020	Jul 15, 2020
Redhat_linux	—	Upgrade java-1.7.1-ibm-jdbcUpgrade java-1.7.1-ibm-demoUpgrade java-1.8.0-ibm-pluginUpgrade java-1.8.0-ibm-webstartUpgrade java-1.8.0-ibm-srcUpgrade java-1.8.0-ibm-jdbcNo solution existsUpgrade java-1.7.1-ibm-develUpgrade java-1.8.0-ibm-demoUpgrade java-1.8.0-ibm-develUpgrade java-1.7.1-ibmUpgrade java-1.8.0-ibmUpgrade java-1.7.1-ibm-srcUpgrade java-1.7.1-ibm-pluginUpgrade java-1.8.0-ibm-headless	Aug 11, 2020	Jul 15, 2020
Suse	—	Upgrade java-1_8_0-ibm-alsaUpgrade java-1_7_1-ibmUpgrade java-1_7_1-ibm-alsaUpgrade java-1_8_0-ibm-develUpgrade java-1_7_1-ibm-jdbcUpgrade java-1_7_1-ibm-pluginUpgrade java-1_8_0-ibm-pluginUpgrade java-1_7_1-ibm-develUpgrade java-1_8_0-ibm	Sep 3, 2020	Jul 15, 2020

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence