Eclipse OpenJ9 CVE-2018-12547 Multiple Buffer Overflow Vulnerabilities
BID:107531
Info
Eclipse OpenJ9 CVE-2018-12547 Multiple Buffer Overflow Vulnerabilities
| Bugtraq ID: | 107531 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2018-12547 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 01 2019 12:00AM |
| Updated: | Mar 01 2019 12:00AM |
| Credit: | Dan Heidinga |
| Vulnerable: |
Redhat Satellite 5 Redhat Enterprise Linux Supplementary 7 Redhat Enterprise Linux Supplementary 6 IBM Java SDK 8 SR5 FP20 IBM Java SDK 8 SR3 FP11 IBM Java SDK 8 SR2 FP10 IBM Java SDK 8 SR1-FP1 IBM Java SDK 8 SR1 IBM Java SDK 8 SR 5 FP 7 IBM Java SDK 8 SR 5 FP 27 IBM Java SDK 8 SR 5 FP 20 IBM Java SDK 8 SR 5 FP 15 IBM Java SDK 8 SR 5 FP 10 IBM Java SDK 8 SR 4 FP 5 IBM Java SDK 8 SR 4 FP 2 IBM Java SDK 8 SR 3 FP 10 IBM Java SDK 8 SR 3 IBM Java SDK 8 SR 2 FP 14 IBM Java SDK 8 SR 2 IBM Java SDK 8 SR 1 FP 10 IBM Java SDK 8 SR 1 FP 1 IBM Java SDK 7R1 SR3-FP1 IBM Java SDK 7R1 SR3 FP50 IBM Java SDK 7R1 SR3 FP40 IBM Java SDK 7R1 SR3 FP30 IBM Java SDK 7R1 SR3 IBM Java SDK 7R1 SR2-FP10 IBM Java SDK 7R1 SR2 IBM Java SDK 7R1 SR1 IBM Java SDK 7R1 SR 4 FP 5 IBM Java SDK 7R1 SR 4 FP 35 IBM Java SDK 7R1 SR 4 FP 30 IBM Java SDK 7R1 SR 4 FP 25 IBM Java SDK 7R1 SR 4 FP 20 IBM Java SDK 7R1 SR 4 FP 15 IBM Java SDK 7R1 SR 4 FP 1 IBM Java SDK 7R1 SR 3 FP 50 IBM Java SDK 7R1 SR 3 FP 40 IBM Java SDK 7R1 SR 3 FP 20 IBM Java SDK 7R1 SR 3 FP 10 IBM Java SDK 7R1 SR 3 FP 1 IBM Java SDK 7 SR9-FP1 IBM Java SDK 7 SR9 FP50 IBM Java SDK 7 SR9 FP40 IBM Java SDK 7 SR9 FP30 IBM Java SDK 7 SR9 IBM Java SDK 7 SR8-FP10 IBM Java SDK 7 SR8 IBM Java SDK 7 SR7 IBM Java SDK 7 SR5 IBM Java SDK 7 SR4-FP2 IBM Java SDK 7 SR4-FP1 IBM Java SDK 7 SR4 IBM Java SDK 7 SR3 IBM Java SDK 7 SR2 IBM Java SDK 7 SR10 FP30 IBM Java SDK 7 SR1 IBM Java SDK 7 SR 9 FP 50 IBM Java SDK 7 SR 9 FP 40 IBM Java SDK 7 SR 9 FP 32 IBM Java SDK 7 SR 9 FP 20 IBM Java SDK 7 SR 9 FP 10 IBM Java SDK 7 SR 9 FP 1 IBM Java SDK 7 SR 10 FP 5 IBM Java SDK 7 SR 10 FP 35 IBM Java SDK 7 SR 10 FP 30 IBM Java SDK 7 SR 10 FP 25 IBM Java SDK 7 SR 10 FP 20 IBM Java SDK 7 SR 10 FP 15 IBM Java SDK 7 SR 10 FP 1 IBM DB2 11.1.3 IBM DB2 11.1.2 FP2 IBM DB2 11.1.2 IBM DB2 11.1.1 IBM DB2 10.1 .4 IBM DB2 9.7.0.9 IBM DB2 9.7.0.8 IBM DB2 9.7.0.7 IBM DB2 9.7.0.6 IBM DB2 9.7.0.5 IBM DB2 9.7.0.4 IBM DB2 9.7.0.3 IBM DB2 9.7.0.2 IBM DB2 9.7.0.1 IBM DB2 9.7 Fp5 IBM DB2 9.7 Fp3a IBM DB2 9.7 Fp2 IBM DB2 9.7 FP11 IBM DB2 9.7 Fixpak 7 IBM DB2 9.7 Fixpak 6 IBM DB2 9.7 Fixpak 4 IBM DB2 9.7 Fixpack 4 IBM DB2 9.7 fixpack 3 IBM DB2 9.7 fixpack 2 IBM DB2 9.7 Fix Pack 7 IBM DB2 9.7 IBM DB2 11.1.4.4 IBM DB2 11.1.3.3 iFix002 IBM DB2 11.1.3.3 iFix001 IBM DB2 11.1.3 FP3 IBM DB2 11.1.2.2 FP2 IBM DB2 11.1.0.0 IBM DB2 10.5.0.7 IBM DB2 10.5.0.4 IBM DB2 10.5.0.3 A IBM DB2 10.5.0.3 IBM DB2 10.5.0.2 IBM DB2 10.5.0.1 IBM DB2 10.1.0.3 IBM DB2 10.1.0.2 IBM DB2 10.1.0.1 IBM DB2 10.1 FP6 IBM DB2 10.1 Fix Pack 1 IBM DB2 10.1 Eclipse OpenJ9 0.11 Eclipse OpenJ9 0.10 Eclipse OpenJ9 0.9 Eclipse OpenJ9 0.8 |
| Not Vulnerable: |
IBM Java SDK 8 SR 5 FP 30 IBM Java SDK 7R1 SR 4 FP 40 IBM Java SDK 7 SR 10 FP 40 Eclipse OpenJ9 0.12 |
References
Eclipse OpenJ9 CVE-2018-12547 Multiple Buffer Overflow Vulnerabilities
References:
References:
- CVE-2018-12547 (Red Hat Bugzilla)
- openj9 Homepage (eclipse.org)
- Bug 1685611 (CVE-2018-12547) - CVE-2018-12547 IBM JDK: buffer overflow in jio_sn (Red Hat Bugzilla)
- Bug 543659 (CVE-2018-12547) - Truncate formatted strings in jio_snprintf / jio_v (Eclipse)
- Clean up jio_snprintf and jio_vfprintf (Eclipse)
- Security Bulletin: Multiple vulnerabilities in IBM Java SDK and IBM Java Runtime (IBM)
- Security Bulletin: Multiple vulnerabilities may affect IBM® SDK, Java�?� Technolog (IBM)