In Eclipse Openj9 before version 0.35.0, interface calls can be inlined without a runtime type check. Malicious bytecode could make use of this inlining to access or modify memory via an incompatible type.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ibm Aix | — | Apply the fix or workaround for java_dec2022_advisory | Jul 27, 2023 | Oct 24, 2022 |
| Ibm Java | — | Upgrade IBM Java to version 7.0.11.15Upgrade IBM Java to version 8.0.7.20Upgrade IBM Java to version 7.1.5.15 | Oct 24, 2022 | Oct 24, 2022 |
| Suse | — | Upgrade java-1_8_0-ibm-pluginUpgrade java-1_8_0-ibm-demoUpgrade java-1_8_0-openj9Upgrade java-1_7_1-ibm-develUpgrade java-1_8_0-openj9-javadocUpgrade java-1_8_0-ibmUpgrade java-1_8_0-openj9-demoUpgrade java-1_7_1-ibm-pluginUpgrade java-1_7_1-ibm-jdbcUpgrade java-1_8_0-ibm-develUpgrade java-1_8_0-openj9-srcUpgrade java-1_8_0-openj9-develUpgrade java-1_7_1-ibmUpgrade java-1_8_0-openj9-accessibilityUpgrade java-1_8_0-ibm-srcUpgrade java-1_8_0-ibm-alsaUpgrade java-1_8_0-ibm-devel-32bitUpgrade java-1_7_1-ibm-alsaUpgrade java-1_8_0-ibm-32bitUpgrade java-1_8_0-openj9-headless | Nov 29, 2022 | Oct 24, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub