In Eclipse OpenJ9 versions up to 0.51, when used with OpenJDK version 8 a stack based buffer overflow can be caused by modifying a file on disk that is read when the JVM starts.
CVSS Details
- CVSS 4.0 Base Score: 7 (HIGH)
- CVSS 4.0 Vector: (CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ibm Java | — | Upgrade IBM Java to version 8.0.8.45Upgrade IBM Java to version 7.1.5.26 | May 9, 2025 | May 9, 2025 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | May 9, 2025 | May 9, 2025 |
| Redhat_linux | — | Upgrade java-1.8.0-ibm-pluginUpgrade java-1.8.0-ibm-srcUpgrade java-1.8.0-ibm-webstartUpgrade java-1.8.0-ibm-demoUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.8.0-ibm-headlessUpgrade java-1.8.0-ibm-develUpgrade java-1.8.0-ibm | Jun 5, 2025 | May 9, 2025 |
| Suse | — | Upgrade java-1_8_0-openj9-demoUpgrade java-1_8_0-openj9-develUpgrade java-1_8_0-ibm-32bitUpgrade java-1_8_0-ibm-srcUpgrade java-1_8_0-openj9-headlessUpgrade java-1_8_0-openj9-accessibilityUpgrade java-1_8_0-openj9-srcUpgrade java-1_8_0-ibm-develUpgrade java-1_8_0-ibm-alsaUpgrade java-1_8_0-ibmUpgrade java-1_8_0-ibm-devel-32bitUpgrade java-1_8_0-ibm-demoUpgrade java-1_8_0-openj9Upgrade java-1_8_0-openj9-javadocUpgrade java-1_8_0-ibm-plugin | Jun 3, 2025 | May 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub