Rapid7

vulnerability

SUSE: CVE-2021-41041: SUSE Linux Security Advisory

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:P/A:N)
Published
Apr 27, 2022
Added
Oct 26, 2022
Modified
Oct 26, 2022

Description

In Eclipse Openj9 before version 0.32.0, Java 8 & 11 fail to throw the exception captured during bytecode verification when verification is triggered by a MethodHandle invocation, allowing unverified methods to be invoked using MethodHandles.

Solutions

suse-upgrade-java-1_8_0-openj9suse-upgrade-java-1_8_0-openj9-accessibilitysuse-upgrade-java-1_8_0-openj9-demosuse-upgrade-java-1_8_0-openj9-develsuse-upgrade-java-1_8_0-openj9-headlesssuse-upgrade-java-1_8_0-openj9-javadocsuse-upgrade-java-1_8_0-openj9-src
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.