Home

CVE-2021-41035

Description

In Eclipse Openj9 before version 0.29.0, the JVM does not throw IllegalAccessError for MethodHandles that invoke inaccessible interface methods.

Risk Information

Base Score
9.8
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.147

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities are affected in IBM TXSeries for Multiplatforms 9.1Windows
Multiple Vulnerabilities are affected in IBM Cognos Analytics 11.1.7Windows
Multiple Vulnerabilities are affected in IBM Cognos Analytics 11.2.4Windows
Multiple Vulnerabilities are affected in IBM Cognos Analytics 12.0.1Windows
Multiple Vulnerabilities are affected in IBM Tivoli Monitoring 6.3.0Windows
Multiple Vulnerabilities are affected in IBM Security Guardium 10.5Windows
Multiple Vulnerabilities are affected in IBM Security Guardium 10.6Windows
Multiple Vulnerabilities are affected in IBM Cognos Controller 10.4.0Windows
Multiple Vulnerabilities are affected in IBM Cognos Controller 10.4.1Windows
Multiple Vulnerabilities are affected in IBM Security Guardium 11.1Windows
Multiple Vulnerabilities are affected in IBM Security Guardium 11.2Windows
Multiple Vulnerabilities are affected in IBM Cognos Controller 10.4.2Windows
Multiple Vulnerabilities are affected in IBM Security Guardium 11.3Windows
Multiple Vulnerabilities are affected in IBM Security Guardium 11.4Windows
Multiple Vulnerabilities are affected in IBM Tivoli Application Dependency Discovery Manager 7.3.0.9Windows
Multiple Vulnerabilities are affected in IBM Security Guardium 11.0Windows
Multiple Vulnerabilities are affected in IBM TXSeries for Multiplatforms 8.2Windows
Multiple Vulnerabilities are affected in IBM MQ 8.0Windows
Multiple Vulnerabilities are affected in IBM MQ 9.0Windows
Multiple Vulnerabilities are affected in IBM MQ 9.1Windows
Multiple Vulnerabilities are affected in IBM MQ 9.2Windows
Multiple Vulnerabilities are affected in IBM Business Automation Workflow 21.0Windows
(RHSA-2021:5030) java-1.8.0-ibm security update java-1.8.0-ibm-1.8.0.7.0-1jpp.1.el7.x86_64.rpmLinux
(RHSA-2021:5030) java-1.8.0-ibm security update java-1.8.0-ibm-demo-1.8.0.7.0-1jpp.1.el7.x86_64.rpmLinux
(RHSA-2021:5030) java-1.8.0-ibm security update java-1.8.0-ibm-devel-1.8.0.7.0-1jpp.1.el7.x86_64.rpmLinux
(RHSA-2021:5030) java-1.8.0-ibm security update java-1.8.0-ibm-jdbc-1.8.0.7.0-1jpp.1.el7.x86_64.rpmLinux
(RHSA-2021:5030) java-1.8.0-ibm security update java-1.8.0-ibm-plugin-1.8.0.7.0-1jpp.1.el7.x86_64.rpmLinux
(RHSA-2021:5030) java-1.8.0-ibm security update java-1.8.0-ibm-src-1.8.0.7.0-1jpp.1.el7.x86_64.rpmLinux
SUSE-SU-2022:0107-1(SUSE Linux Enterprise Server 12-SP5 ) java-1_8_0-ibm-1.8.0_sr7.0-30.84.1.x86_64.rpmLinux
SUSE-SU-2022:0107-1(SUSE Linux Enterprise Server 12-SP5 ) java-1_8_0-ibm-alsa-1.8.0_sr7.0-30.84.1.x86_64.rpmLinux
SUSE-SU-2022:0107-1(SUSE Linux Enterprise Server 12-SP5 ) java-1_8_0-ibm-devel-1.8.0_sr7.0-30.84.1.x86_64.rpmLinux
SUSE-SU-2022:0107-1(SUSE Linux Enterprise Server 12-SP5 ) java-1_8_0-ibm-plugin-1.8.0_sr7.0-30.84.1.x86_64.rpmLinux
(RHSA-2022:0310) java-1.7.1-ibm security update java-1.7.1-ibm-1.7.1.5.0-1jpp.1.el7.x86_64.rpmLinux
(RHSA-2022:0310) java-1.7.1-ibm security update java-1.7.1-ibm-demo-1.7.1.5.0-1jpp.1.el7.x86_64.rpmLinux
(RHSA-2022:0310) java-1.7.1-ibm security update java-1.7.1-ibm-devel-1.7.1.5.0-1jpp.1.el7.x86_64.rpmLinux
(RHSA-2022:0310) java-1.7.1-ibm security update java-1.7.1-ibm-jdbc-1.7.1.5.0-1jpp.1.el7.x86_64.rpmLinux
(RHSA-2022:0310) java-1.7.1-ibm security update java-1.7.1-ibm-plugin-1.7.1.5.0-1jpp.1.el7.x86_64.rpmLinux
(RHSA-2022:0310) java-1.7.1-ibm security update java-1.7.1-ibm-src-1.7.1.5.0-1jpp.1.el7.x86_64.rpmLinux
(RHSA-2022:0345) java-1.8.0-ibm security update java-1.8.0-ibm-1.8.0.7.0-1.el8_5.x86_64.rpmLinux
(RHSA-2022:0345) java-1.8.0-ibm security update java-1.8.0-ibm-demo-1.8.0.7.0-1.el8_5.x86_64.rpmLinux
(RHSA-2022:0345) java-1.8.0-ibm security update java-1.8.0-ibm-devel-1.8.0.7.0-1.el8_5.x86_64.rpmLinux
(RHSA-2022:0345) java-1.8.0-ibm security update java-1.8.0-ibm-headless-1.8.0.7.0-1.el8_5.x86_64.rpmLinux
(RHSA-2022:0345) java-1.8.0-ibm security update java-1.8.0-ibm-jdbc-1.8.0.7.0-1.el8_5.x86_64.rpmLinux
(RHSA-2022:0345) java-1.8.0-ibm security update java-1.8.0-ibm-plugin-1.8.0.7.0-1.el8_5.x86_64.rpmLinux
(RHSA-2022:0345) java-1.8.0-ibm security update java-1.8.0-ibm-src-1.8.0.7.0-1.el8_5.x86_64.rpmLinux
(RHSA-2022:0345) java-1.8.0-ibm security update java-1.8.0-ibm-webstart-1.8.0.7.0-1.el8_5.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234