) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.
Search Results (Refine Search)
Search Parameters:
- Results Type: Overview
- Keyword (text search): cpe:2.3:a:eclipse:openj9:0.32.0:m1:*:*:*:*:*:*
- CPE Name Search: true
There are 3 matching records.
Displaying matches 1 through 3.
| Vuln ID | Summary | CVSS Severity |
|---|---|---|
| CVE-2023-5676 |
In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang on a spinlock or a segmentation fault if a shutdown signal (SIGTERM, SIGINT or SIGHUP) is received before the JVM has finished initializing. Published: November 15, 2023; 9:15:07 AM -0500 |
V3.1: 5.9 MEDIUM V2.0:(not available) |
| CVE-2023-2597 |
In Eclipse Openj9 before version 0.38.0, in the implementation of the shared cache (which is enabled by default in OpenJ9 builds) the size of a string is not properly checked against the size of the buffer. Published: May 22, 2023; 8:15:09 AM -0400 |
V3.1: 9.1 CRITICAL V2.0:(not available) |
| CVE-2022-3676 |
In Eclipse Openj9 before version 0.35.0, interface calls can be inlined without a runtime type check. Malicious bytecode could make use of this inlining to access or modify memory via an incompatible type. Published: October 24, 2022; 10:15:51 AM -0400 |
V3.1: 6.5 MEDIUM V2.0:(not available) |