CVE-2018-12539: Unprotected Primary Channel

In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach API to connect to an Eclipse OpenJ9 or IBM JVM on the same machine and use Attach API operations, which includes the ability to execute untrusted native code. Attach API is enabled by default on...

PT-2018-15942

Name of the Vulnerable Software and Affected Versions Java SE versions 8u172 and 10.0.1 Eclipse OpenJ9 affected versions not specified Description The issue allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE, requiring human interaction from a pers...

PT-2018-2769

Name of the Vulnerable Software and Affected Versions Eclipse OpenJ9 version 0.8 Description The issue is related to the Java Attach API, which is enabled by default on Windows, Linux, and AIX JVMs. This allows users other than the process owner to connect to an Eclipse OpenJ9 or IBM JVM on the...

PT-2018-2609

Name of the Vulnerable Software and Affected Versions Eclipse OpenJ9 version 0.11.0 libjpeg affected versions not specified Description The issue is related to insufficient input validation in the OpenJ9 JIT compiler component of the Eclipse OpenJ9 virtual machine. This can be exploited by a remo...

PT-2018-2610

Name of the Vulnerable Software and Affected Versions Eclipse OpenJ9 versions prior to 0.12.0 libjpeg affected versions not specified Description The issue is related to buffer overflow in the jio snprintf and jio vsnprintf functions of Eclipse OpenJ9, which can be exploited by a remote attacker ...