1700 matches found
CVE-2018-12539
CVE-2018-12539 affects IBM/OpenJ9-based JVMs where the Java Attach API can be used by non-owners to connect to a local OpenJ9/IBM JVM and run untrusted native code. By default Attach API is enabled on Windows, Linux and AIX; a workaround is to disable it with -Dcom.ibm.tools.attach.enable=no. IBM...
CVE-2018-12539: Unprotected Primary Channel
In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach API to connect to an Eclipse OpenJ9 or IBM JVM on the same machine and use Attach API operations, which includes the ability to execute untrusted native code. Attach API is enabled by default on...
PT-2018-15942
Name of the Vulnerable Software and Affected Versions Java SE versions 8u172 and 10.0.1 Eclipse OpenJ9 affected versions not specified Description The issue allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE, requiring human interaction from a pers...
PT-2018-2769
Name of the Vulnerable Software and Affected Versions Eclipse OpenJ9 version 0.8 Description The issue is related to the Java Attach API, which is enabled by default on Windows, Linux, and AIX JVMs. This allows users other than the process owner to connect to an Eclipse OpenJ9 or IBM JVM on the...
PT-2018-2609
Name of the Vulnerable Software and Affected Versions Eclipse OpenJ9 version 0.11.0 libjpeg affected versions not specified Description The issue is related to insufficient input validation in the OpenJ9 JIT compiler component of the Eclipse OpenJ9 virtual machine. This can be exploited by a remo...
PT-2018-2610
Name of the Vulnerable Software and Affected Versions Eclipse OpenJ9 versions prior to 0.12.0 libjpeg affected versions not specified Description The issue is related to buffer overflow in the jio snprintf and jio vsnprintf functions of Eclipse OpenJ9, which can be exploited by a remote attacker ...
CVE-2013-4578 vulnerabilities
Vulnerabilities for packages: openjdk-11-openj9, openjdk-25-openj9, openjdk-26-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-17-openj9...
CVE-2013-5851 vulnerabilities
Vulnerabilities for packages: openjdk-11-openj9, openjdk-25-openj9, openjdk-26-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-17-openj9...
CVE-2013-5852 vulnerabilities
Vulnerabilities for packages: openjdk-11-openj9, openjdk-25-openj9, openjdk-26-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-17-openj9...
CVE-2013-5854 vulnerabilities
Vulnerabilities for packages: openjdk-11-openj9, openjdk-25-openj9, openjdk-26-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-17-openj9...
CVE-2013-5840 vulnerabilities
Vulnerabilities for packages: openjdk-11-openj9, openjdk-25-openj9, openjdk-26-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-17-openj9...
CVE-2013-5844 vulnerabilities
Vulnerabilities for packages: openjdk-11-openj9, openjdk-25-openj9, openjdk-26-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-17-openj9...
CVE-2013-5849 vulnerabilities
Vulnerabilities for packages: openjdk-11-openj9, openjdk-25-openj9, openjdk-26-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-17-openj9...
CVE-2013-5802 vulnerabilities
Vulnerabilities for packages: openjdk-11-openj9, openjdk-25-openj9, openjdk-26-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-17-openj9...
CVE-2013-5803 vulnerabilities
Vulnerabilities for packages: openjdk-11-openj9, openjdk-25-openj9, openjdk-26-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-17-openj9...
CVE-2013-5804 vulnerabilities
Vulnerabilities for packages: openjdk-11-openj9, openjdk-25-openj9, openjdk-26-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-17-openj9...
CVE-2013-5806 vulnerabilities
Vulnerabilities for packages: openjdk-11-openj9, openjdk-25-openj9, openjdk-26-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-17-openj9...
CVE-2013-5817 vulnerabilities
Vulnerabilities for packages: openjdk-11-openj9, openjdk-25-openj9, openjdk-26-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-17-openj9...