Eclipse OpenJ9 vulnerabilities
4 known vulnerabilities in Eclipse OpenJ9 from Eclipse Foundation. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.7 High severity
In Eclipse OpenJ9 versions up to 0.63.0, the JITServer component is vulnerable to denial of…
In Eclipse OpenJ9 versions up to 0.63.0, the JITServer component is vulnerable to denial of service due to improper boundary checks during protocol message and reply handling. An unauthenticated remote attacker or malicious JITServer can transmit malformed net
- 8.7 High severity
Eclipse OpenJ9: Out-of-bounds Read
In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component fails to perform cross-field validation on attacker-controlled `_size`, `_paddingSize`, and `_dataOffset` fields during `DataDescriptor` message deserialization. An unauthenticated remote atta
- 8.7 High severity
Eclipse OpenJ9: Integer Overflow or Wraparound
In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component is vulnerable to a pre-authentication remote denial of service. When processing the initial 4-byte length field of an incoming TCP connection, an integer overflow in `MessageBuffer::computeReq
- 9.1 Critical severity
Eclipse OpenJ9: Out-of-bounds Read
In Eclipse Openj9 before version 0.38.0, in the implementation of the shared cache (which is enabled by default in OpenJ9 builds) the size of a string is not properly checked against the size of the buffer.