In Eclipse OpenJ9 versions up to 0.60, using -Xtrace to trace method arguments can lead to buffer underflow.
CVSS Details
- CVSS 4.0 Base Score: 5.8 (MEDIUM)
- CVSS 4.0 Vector: (CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:A/VC:N/VI:H/VA:H/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ibm Aix | — | Apply the fix or workaround for aix_vios_advisory | Aug 16, 2026 | Aug 14, 2026 |
| Ibm Java | — | Upgrade IBM Java to version 8.0.8.70Upgrade IBM Java to version 7.1.5.31 | Jul 21, 2026 | Jul 21, 2026 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Jul 21, 2026 | Jul 21, 2026 |
| Redhat_linux | — | Upgrade java-1.8.0-ibm-develUpgrade java-1.8.0-ibm-pluginUpgrade java-1.8.0-ibm-headlessUpgrade java-1.8.0-ibm-jdbcUpgrade java-21-ibm-semeru-certified-jdk-headlessUpgrade java-1.8.0-ibm-srcUpgrade java-21-ibm-semeru-certified-jdk-jmodsUpgrade java-21-ibm-semeru-certified-jdkUpgrade java-21-ibm-semeru-certified-jdk-srcUpgrade java-21-ibm-semeru-certified-jdk-develUpgrade java-1.8.0-ibmUpgrade java-1.8.0-ibm-demoUpgrade java-1.8.0-ibm-webstart | Aug 10, 2026 | Jul 21, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub