Lucene search
HistoryMay 22, 2023 - 12:15 p.m.
CVE-2023-2597
cve-2023-2597
eclipse openj9
buffer size vulnerability
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
AI Score
8.1
Confidence
High
EPSS
0.001
Percentile
48.3%
In Eclipse Openj9 before version 0.38.0, in the implementation of the shared cache (which is enabled by default in OpenJ9 builds) the size of a string is not properly checked against the size of the buffer.
Affected configurations
Node
eclipseopenj9Range<0.38.0
Related
osv
osv
CVE-2023-2597
2023-05-22 12:15:09
java-1_8_0-openj9-1.8.0.372-1.1 on GA media
2024-06-15 00:00:00
java-11-openj9-11.0.20.0-1.1 on GA media
2024-06-15 00:00:00
cvelist
cvelist
CVE-2023-2597
2023-05-22 00:00:00
vulnrichment
vulnrichment
CVE-2023-2597
2023-05-22 00:00:00
prion
prion
Buffer overflow
2023-05-22 12:15:00
nessus
nessus
IBM Java 7.1 < 7.1.5.18 / 8.0 < 8.0.8.5
2023-06-20 00:00:00
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : java-1_8_0-openj9 (SUSE-SU-2023:3305-1)
2023-08-15 00:00:00
SUSE SLES12 Security Update : java-1_8_0-ibm (SUSE-SU-2023:2476-1)
2023-06-12 00:00:00
cve
cve
CVE-2023-2597
2023-05-22 12:15:09
aix
aix
Multiple vulnerabilities in IBM Java SDK affect AIX
2023-07-11 10:46:27
openvas
openvas
openSUSE: Security Advisory for java (SUSE-SU-2023:3305-1)
2024-03-04 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:2491-1)
2023-06-13 00:00:00
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
AI Score
8.1
Confidence
High
EPSS
0.001
Percentile
48.3%
Related for NVD:CVE-2023-2597