PT-2018-2609 · Eclipse+4 · Eclipse Openj9+4

Vij Singh · Published 2018-04-16 · Updated 2019-05-16 · CVE-2018-12549

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Eclipse OpenJ9 version 0.11.0 libjpeg (affected versions not specified)

Description The issue is related to insufficient input validation in the OpenJ9 JIT compiler component of the Eclipse OpenJ9 virtual machine. This can be exploited by a remote attacker to execute arbitrary code. Additionally, there is a problem with the OpenJ9 JIT compiler incorrectly omitting a null check on the receiver object of an Unsafe call when accelerating it. Furthermore, libjpeg is vulnerable to a denial of service caused by a divide-by-zero error in the alloc sarray function in jmemmgr.c, which can be exploited by a remote attacker to cause the application to crash by persuading a victim to open a specially-crafted file.

Recommendations For Eclipse OpenJ9 version 0.11.0, consider disabling the JIT compiler as a temporary workaround until a patch is available. For libjpeg, avoid using the alloc sarray function in jmemmgr.c until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Weakness Enumeration

CWE-111

CWE-20

Related Identifiers

BDU:2019-01160

CESA-2019_1238

CVE-2018-12549

RHSA-2019:0469

RHSA-2019:0472

RHSA-2019:0640

RHSA-2019:1238

RHSA-2019_0469

RHSA-2019_0472

RHSA-2019_1238

Affected Products

Centos

Eclipse Openj9

Ibm Aix

Red Hat

Libjpeg

References · 40

• https://access.redhat.com/errata/RHSA-2019:1238 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-01161 · Security Note
• https://bdu.fstec.ru/vul/2019-01524 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2422 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11212 · Security Note
• https://bugs.eclipse.org/bugs/show_bug.cgi?id=544019 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2019:0640 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2698 · Security Note
• https://access.redhat.com/errata/RHSA-2019:0472 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-01160 · Security Note
• https://bdu.fstec.ru/vul/2019-00617 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12547 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10245 · Security Note
• https://bdu.fstec.ru/vul/2019-01548 · Security Note
• https://access.redhat.com/errata/RHSA-2019:0469 · Vendor Advisory