Home

CVE-2018-12549

Description

In Eclipse OpenJ9 version 0.11.0, the OpenJ9 JIT compiler may incorrectly omit a null check on the receiver object of an Unsafe call when accelerating it.

Risk Information

Base Score
9.8
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.719

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities are affected in IBM Security Guardium 9.5Windows
Multiple Vulnerabilities are affected in IBM Security Guardium 10.6Windows
Multiple Vulnerabilities are affected in IBM MQ 9.0.0Windows
(RHSA-2019:0472) java-1.8.0-ibm security update java-1.8.0-ibm-1.8.0.5.30-1jpp.1.el7.x86_64.rpmLinux
(RHSA-2019:0472) java-1.8.0-ibm security update java-1.8.0-ibm-demo-1.8.0.5.30-1jpp.1.el7.x86_64.rpmLinux
(RHSA-2019:0472) java-1.8.0-ibm security update java-1.8.0-ibm-devel-1.8.0.5.30-1jpp.1.el7.x86_64.rpmLinux
(RHSA-2019:0472) java-1.8.0-ibm security update java-1.8.0-ibm-jdbc-1.8.0.5.30-1jpp.1.el7.x86_64.rpmLinux
(RHSA-2019:0472) java-1.8.0-ibm security update java-1.8.0-ibm-plugin-1.8.0.5.30-1jpp.1.el7.x86_64.rpmLinux
(RHSA-2019:0472) java-1.8.0-ibm security update java-1.8.0-ibm-src-1.8.0.5.30-1jpp.1.el7.x86_64.rpmLinux
(RHSA-2019:1238) java-1.8.0-ibm security update java-1.8.0-ibm-1.8.0.5.35-3.el8_0.x86_64.rpmLinux
(RHSA-2019:1238) java-1.8.0-ibm security update java-1.8.0-ibm-demo-1.8.0.5.35-3.el8_0.x86_64.rpmLinux
(RHSA-2019:1238) java-1.8.0-ibm security update java-1.8.0-ibm-devel-1.8.0.5.35-3.el8_0.x86_64.rpmLinux
(RHSA-2019:1238) java-1.8.0-ibm security update java-1.8.0-ibm-headless-1.8.0.5.35-3.el8_0.x86_64.rpmLinux
(RHSA-2019:1238) java-1.8.0-ibm security update java-1.8.0-ibm-jdbc-1.8.0.5.35-3.el8_0.x86_64.rpmLinux
(RHSA-2019:1238) java-1.8.0-ibm security update java-1.8.0-ibm-plugin-1.8.0.5.35-3.el8_0.x86_64.rpmLinux
(RHSA-2019:1238) java-1.8.0-ibm security update java-1.8.0-ibm-src-1.8.0.5.35-3.el8_0.x86_64.rpmLinux
(RHSA-2019:1238) java-1.8.0-ibm security update java-1.8.0-ibm-webstart-1.8.0.5.35-3.el8_0.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234