PT-2019-3218 · Eclipse+4 · Eclipse Openj9+4
Peter Shipton
·
Published
2019-07-08
·
Updated
2019-10-09
·
CVE-2019-11772
CVSS v3.1
10
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Eclipse OpenJ9 versions prior to 0.15
Description
The issue is related to the String.getBytes(int, int, byte[], int) method in Eclipse OpenJ9, which does not verify that the provided byte array is non-null nor that the provided index is in bounds when compiled by the JIT. This allows arbitrary writes to any 32-bit address or beyond the end of a byte array within Java code run under a SecurityManager. The vulnerability is also associated with a buffer overflow, which could allow a remote attacker to execute arbitrary code.
Recommendations
For Eclipse OpenJ9 versions prior to 0.15, update to version 0.15 or later to resolve the issue. As a temporary workaround, consider restricting the use of the String.getBytes(int, int, byte[], int) method until a patch is available. Additionally, ensure that all code run under a SecurityManager is thoroughly reviewed and validated to prevent potential exploitation.
Fix
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Centos
Eclipse Openj9
Ibm Aix
Red Hat
Suse