Every CVE Search/ Get API key

CVE-2023-5676

Eclipse OpenJ9 possible infinite busy hang

4.1 Medium

In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang on a spinlock or a segmentation fault if a shutdown signal (SIGTERM, SIGINT or SIGHUP) is received before the JVM has finished initializing.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.41%Up 0.4 points since Nov 16, 2023
90%50%10%1%

What each source reports

CVE List Score used 4.1

Eclipse OpenJ9 possible infinite busy hang

In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang on a spinlock or a segmentation fault if a shutdown signal (SIGTERM, SIGINT or SIGHUP) is received before the JVM has finished initializing.

Record
CVE-2023-5676
CVSS 3.1
4.1 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-364
Updated
2026-11-02
EUVDEUVD-2023-57967 4.1

In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang on a spinlock or a segmentation fault if a shutdown signal (SIGTERM, SIGINT or SIGHUP) is received before the JVM has finished initializing.

Record
EUVD-2023-57967
CVSS 3.1
4.1 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-5ch2-qvr7-76ch 4.1

In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang on a...

In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang on a spinlock or a segmentation fault if a shutdown signal (SIGTERM, SIGINT or SIGHUP) is received before the JVM has finished initializing.

Record
GHSA-5ch2-qvr7-76ch
CVSS 3.1
4.1 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-362, CWE-364
Updated
2026-11-02
NVD 4.1

In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang on a spinlock or a segmentation fault if a shutdown signal (SIGTERM, SIGINT or SIGHUP) is received before the JVM has finished initializing.

Record
CVE-2023-5676
CVSS 3.1
4.1 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-364, CWE-362
Updated
2026-11-02
OSV 4.1

Eclipse OpenJ9 possible infinite busy hang

In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang on a spinlock or a segmentation fault if a shutdown signal (SIGTERM, SIGINT or SIGHUP) is received before the JVM has finished initializing.

Record
CVE-2023-5676
CVSS 3.1
4.1 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-364
Updated
2026-11-02
OSVRHSA-2024:0866 5.3

Red Hat Security Advisory: java-1.8.0-ibm security update

Record
RHSA-2024:0866
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
Show 10 moreShow less
OSVRHSA-2024:0879 5.3

Red Hat Security Advisory: java-1.8.0-ibm security update

Record
RHSA-2024:0879
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVopenSUSE-SU-2024:13455-1 No score

java-11-openj9-11.0.21.0-1.1 on GA media

These are all security issues fixed in the java-11-openj9-11.0.21.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13455-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:13456-1 No score

java-17-openj9-17.0.9.0-1.1 on GA media

These are all security issues fixed in the java-17-openj9-17.0.9.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13456-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:13457-1 No score

java-1_8_0-openj9-1.8.0.392-1.1 on GA media

These are all security issues fixed in the java-1_8_0-openj9-1.8.0.392-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13457-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:0066-1 No score

Security update for java-11-openj9

This update for java-11-openj9 fixes the following issues:

  • Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine

  • Including Oracle October 2024 and January 2025 CPU changes

  • Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine

  • Including Oracle July 2024 CPU changes

    • CVE-2024-21131 (boo#1228046), CVE-2024-21138 (boo#1228047), CVE-2024-21140 (boo#1228048), CVE-2024-21144 (boo#1228050), CVE-2024-21147 (boo#1228052), CVE-2024-21145 (boo#1228051)
    • OpenJ9 changes, see https://www.eclipse.org/openj9/docs/version0.46/

  • Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine

  • Including Oracle April 2024 CPU changes

    • CVE-2024-21012 (boo#1222987), CVE-2024-21094 (boo#1222986), CVE-2024-21011 (boo#1222979), CVE-2024-21085 (boo#1222984), CVE-2024-21068 (boo#1222983)

  • Including OpenJ9/OMR specific fix:

  • Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine

  • Including Oracle January 2024 CPU changes

    • CVE-2024-20918 (boo#1218907), CVE-2024-20919 (boo#1218903), CVE-2024-20921 (boo#1218905), CVE-2024-20926 (boo#1218906), CVE-2024-20945 (boo#1218909), CVE-2024-20952 (boo#1218911)
    • OpenJ9 changes, see https://www.eclipse.org/openj9/docs/version0.43/

  • Remove the possibility to put back removes JavaEE modules, since our Java stack does not need this hack any more

  • Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine

  • Including Oracle October 2023 CPU changes

    • CVE-2023-22081, boo#1216374

  • Including Openj9 0.41.0 fixes of CVE-2023-5676, boo#1217214

  • Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine

    • JDK-8313765: Invalid CEN header (invalid zip64 extra data field size)

  • Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine

  • Including Oracle April 2023 CPU changes

    • CVE-2023-22006 (boo#1213473), CVE-2023-22036 (boo#1213474), CVE-2023-22041 (boo#1213475), CVE-2023-22045 (boo#1213481), CVE-2023-22049 (boo#1213482), CVE-2023-25193 (boo#1207922)
    • OpenJ9 changes, see https://www.eclipse.org/openj9/docs/version0.40

  • Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine

  • Including Oracle April 2023 CPU changes

    • CVE-2023-21930 (boo#1210628), CVE-2023-21937 (boo#1210631), CVE-2023-21938 (boo#1210632), CVE-2023-21939 (boo#1210634), CVE-2023-21954 (boo#1210635), CVE-2023-21967 (boo#1210636), CVE-2023-21968 (boo#1210637)
    • OpenJ9 specific vulnerability: CVE-2023-2597 (boo#1211615)
    • OpenJ9 changes, see https://www.eclipse.org/openj9/docs/version0.38

  • Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine

  • Update to OpenJDK 11.0.17 with OpenJ9 0.35.0 virtual machine

    • Including Oracle October 2022 CPU changes CVE-2022-21618 (boo#1204468), CVE-2022-21619 (boo#1204473), CVE-2022-21626 (boo#1204471), CVE-2022-21624 (boo#1204475), CVE-2022-21628 (boo#1204472), CVE-2022-39399 (boo#1204480)
    • Fixes OpenJ9 vulnerability boo#1204703, CVE-2022-3676
    • OpenJ9 changes, see https://www.eclipse.org/openj9/docs/version0.35

  • Update to OpenJDK 11.0.16 with OpenJ9 0.33.0 virtual machine

  • Update to OpenJDK 11.0.15 with OpenJ9…

Record
openSUSE-SU-2025:0066-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:0067-1 No score

Security update for java-17-openj9

This update for java-17-openj9 fixes the following issues:

  • Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine

  • Including Oracle October 2024 and January 2025 CPU changes

  • Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine

  • Including Oracle July 2024 CPU changes

  • Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine

  • Including Oracle April 2024 CPU changes

  • Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine

  • Including Oracle January 2024 CPU changes

    • CVE-2024-20918 (boo#1218907), CVE-2024-20919 (boo#1218903), CVE-2024-20921 (boo#1218905), CVE-2024-20932 (boo#1218908), CVE-2024-20945 (boo#1218909), CVE-2024-20952 (boo#1218911)
    • OpenJ9 changes, see https://www.eclipse.org/openj9/docs/version0.43/

  • Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine

  • Including Oracle October 2023 CPU changes

    • CVE-2023-22081, boo#1216374
    • CVE-2023-22025, boo#1216339

  • Including Openj9 0.41.0 fixes of CVE-2023-5676, boo#1217214

  • Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine

    • JDK-8313765: Invalid CEN header (invalid zip64 extra data field size)

  • Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine

  • Including Oracle July 2023 CPU changes

    • CVE-2023-22006 (boo#1213473), CVE-2023-22036 (boo#1213474), CVE-2023-22041 (boo#1213475), CVE-2023-22044 (boo#1213479), CVE-2023-22045 (boo#1213481), CVE-2023-22049 (boo#1213482), CVE-2023-25193 (boo#1207922)
    • OpenJ9 changes, see https://www.eclipse.org/openj9/docs/version0.40

  • Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine

  • Including Oracle April 2023 CPU changes

    • CVE-2023-21930 (boo#1210628), CVE-2023-21937 (boo#1210631), CVE-2023-21938 (boo#1210632), CVE-2023-21939 (boo#1210634), CVE-2023-21954 (boo#1210635), CVE-2023-21967 (boo#1210636), CVE-2023-21968 (boo#1210637)
    • OpenJ9 specific vulnerability: CVE-2023-2597 (boo#1211615)
    • OpenJ9 changes, see https://www.eclipse.org/openj9/docs/version0.38

  • Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine

  • Update to OpenJDK 17.0.5 with OpenJ9 0.35.0 virtual machine

    • Including Oracle October 2022 CPU changes CVE-2022-21618 (boo#1204468), CVE-2022-21619 (boo#1204473), CVE-2022-21626 (boo#1204471), CVE-2022-21624 (boo#1204475), CVE-2022-21628 (boo#1204472), CVE-2022-39399 (boo#1204480)
    • Fixes OpenJ9 vulnerability boo#1204703, CVE-2022-3676
    • OpenJ9 changes, see https://www.eclipse.org/openj9/docs/version0.35
Record
openSUSE-SU-2025:0067-1
Updated
2026-11-02
OSVSUSE-SU-2023:4572-1 No score

Security update for java-1_8_0-ibm

This update for java-1_8_0-ibm fixes the following issues:

  • Update to Java 8.0 Service Refresh 8 Fix Pack 15:
    • Oracle October 17 2023 CPU [bsc#1216640]

Security fixes:

  • CVE-2023-22081: Fixed enhanced TLS connections (bsc#1216374)
  • CVE-2023-22067: Fixed IOR deserialization issue in CORBA (bsc#1216379)
  • CVE-2023-22025: Fixed memory corruption issue on x86_64 with AVX-512 (bsc#1216339)
  • CVE-2023-5676: Fixed receiving a signal before initialization may lead to an infinite loop or unexpected crash (bsc#1217214)

Bug fixes:

  • IBM Java idlj compiler switch definition because IBM java idlj seems to confuse char and wchar for typedef types (bsc#1204264).
Record
SUSE-SU-2023:4572-1
Updated
2026-11-02
OSVSUSE-SU-2023:4612-1 No score

Security update for java-1_8_0-openj9

This update for java-1_8_0-openj9 fixes the following issues:

Update to OpenJDK 8u392 build 08 with OpenJ9 0.41.0 virtual machine

  • CVE-2023-22067: Fixed an IOR deserialization issue in CORBA (bsc#1216379).
  • CVE-2023-22081: Fixed a certificate path validation issue during client authentication (bsc#1216374).
  • CVE-2023-5676: Fixed receiving a signal before initialization may lead to an infinite loop or unexpected crash (bsc#1217214).
Record
SUSE-SU-2023:4612-1
Updated
2026-11-02
OSVSUSE-SU-2023:4614-1 No score

Security update for java-1_8_0-ibm

This update for java-1_8_0-ibm fixes the following issues:

  • Update to Java 8.0 Service Refresh 8 Fix Pack 15:
    • Oracle October 17 2023 CPU [bsc#1216640]

Security fixes:

  • CVE-2023-22081: Fixed enhanced TLS connections (bsc#1216374)
  • CVE-2023-22067: Fixed IOR deserialization issue in CORBA (bsc#1216379)
  • CVE-2023-22025: Fixed memory corruption issue on x86_64 with AVX-512 (bsc#1216339)
  • CVE-2023-5676: Fixed receiving a signal before initialization may lead to an infinite loop or unexpected crash (bsc#1217214)

Bug fixes:

  • IBM Java idlj compiler switch definition because IBM java idlj seems to confuse char and wchar for typedef types (bsc#1204264).
Record
SUSE-SU-2023:4614-1
Updated
2026-11-02
OSVSUSE-SU-2024:0479-1 No score

Security update for java-1_8_0-openj9

This update for java-1_8_0-openj9 fixes the following issues:

Update to OpenJDK 8u402 build 06 with OpenJ9 0.43.0 virtual machine

  • Including OpenJ9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  • CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903), CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906), CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
Record
SUSE-SU-2024:0479-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
java-1.8.0-ibm
Red Hat:enterprise_linux:8::supplementary
From an advisory covering 3 CVEs
 before 1:1.8.0.8.15-1.el8_9
1:1.8.0.8.15-1.el8_9
java-1.8.0-ibm-demo
Red Hat:enterprise_linux:8::supplementary
From an advisory covering 3 CVEs
 before 1:1.8.0.8.15-1.el8_9
1:1.8.0.8.15-1.el8_9
java-1.8.0-ibm-devel
Red Hat:enterprise_linux:8::supplementary
From an advisory covering 3 CVEs
 before 1:1.8.0.8.15-1.el8_9
1:1.8.0.8.15-1.el8_9
java-1.8.0-ibm-headless
Red Hat:enterprise_linux:8::supplementary
From an advisory covering 3 CVEs
 before 1:1.8.0.8.15-1.el8_9
1:1.8.0.8.15-1.el8_9
java-1.8.0-ibm-jdbc
Red Hat:enterprise_linux:8::supplementary
From an advisory covering 3 CVEs
 before 1:1.8.0.8.15-1.el8_9
1:1.8.0.8.15-1.el8_9
java-1.8.0-ibm-plugin
Red Hat:enterprise_linux:8::supplementary
From an advisory covering 3 CVEs
 before 1:1.8.0.8.15-1.el8_9
1:1.8.0.8.15-1.el8_9
java-1.8.0-ibm-src
Red Hat:enterprise_linux:8::supplementary
From an advisory covering 3 CVEs
 before 1:1.8.0.8.15-1.el8_9
1:1.8.0.8.15-1.el8_9
java-1.8.0-ibm-webstart
Red Hat:enterprise_linux:8::supplementary
From an advisory covering 3 CVEs
 before 1:1.8.0.8.15-1.el8_9
1:1.8.0.8.15-1.el8_9
java-1.8.0-ibm
Red Hat:rhel_extras:7
From an advisory covering 3 CVEs
 before 1:1.8.0.8.15-1jpp.1.el7
1:1.8.0.8.15-1jpp.1.el7
java-1.8.0-ibm-demo
Red Hat:rhel_extras:7
From an advisory covering 3 CVEs
 before 1:1.8.0.8.15-1jpp.1.el7
1:1.8.0.8.15-1jpp.1.el7
Show 32 moreShow less
Affected packages
PackageAffectedFixed
java-1.8.0-ibm-devel
Red Hat:rhel_extras:7
From an advisory covering 3 CVEs
 before 1:1.8.0.8.15-1jpp.1.el7
1:1.8.0.8.15-1jpp.1.el7
java-1.8.0-ibm-jdbc
Red Hat:rhel_extras:7
From an advisory covering 3 CVEs
 before 1:1.8.0.8.15-1jpp.1.el7
1:1.8.0.8.15-1jpp.1.el7
java-1.8.0-ibm-plugin
Red Hat:rhel_extras:7
From an advisory covering 3 CVEs
 before 1:1.8.0.8.15-1jpp.1.el7
1:1.8.0.8.15-1jpp.1.el7
java-1.8.0-ibm-src
Red Hat:rhel_extras:7
From an advisory covering 3 CVEs
 before 1:1.8.0.8.15-1jpp.1.el7
1:1.8.0.8.15-1jpp.1.el7
java-1_8_0-ibm
SUSE:Linux Enterprise Module for Legacy 15 SP4
From an advisory covering 4 CVEs
 before 1.8.0_sr8.15-150000.3.83.1
1.8.0_sr8.15-150000.3.83.1
java-1_8_0-ibm
SUSE:Linux Enterprise Module for Legacy 15 SP5
From an advisory covering 4 CVEs
 before 1.8.0_sr8.15-150000.3.83.1
1.8.0_sr8.15-150000.3.83.1
java-1_8_0-ibm
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
From an advisory covering 4 CVEs
 before 1.8.0_sr8.15-150000.3.83.1
1.8.0_sr8.15-150000.3.83.1
java-1_8_0-ibm
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 4 CVEs
 before 1.8.0_sr8.15-150000.3.83.1
1.8.0_sr8.15-150000.3.83.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 4 CVEs
 before 1.8.0_sr8.15-150000.3.83.1
1.8.0_sr8.15-150000.3.83.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 4 CVEs
 before 1.8.0_sr8.15-150000.3.83.1
1.8.0_sr8.15-150000.3.83.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 4 CVEs
 before 1.8.0_sr8.15-150000.3.83.1
1.8.0_sr8.15-150000.3.83.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 4 CVEs
 before 1.8.0_sr8.15-150000.3.83.1
1.8.0_sr8.15-150000.3.83.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 4 CVEs
 before 1.8.0_sr8.15-150000.3.83.1
1.8.0_sr8.15-150000.3.83.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 4 CVEs
 before 1.8.0_sr8.15-150000.3.83.1
1.8.0_sr8.15-150000.3.83.1
java-1_8_0-ibm
SUSE:Enterprise Storage 7.1
From an advisory covering 4 CVEs
 before 1.8.0_sr8.15-150000.3.83.1
1.8.0_sr8.15-150000.3.83.1
java-1_8_0-ibm
openSUSE:Leap 15.4
From an advisory covering 4 CVEs
 before 1.8.0_sr8.15-150000.3.83.1
1.8.0_sr8.15-150000.3.83.1
java-1_8_0-ibm
openSUSE:Leap 15.5
From an advisory covering 4 CVEs
 before 1.8.0_sr8.15-150000.3.83.1
1.8.0_sr8.15-150000.3.83.1
java-1_8_0-openj9
SUSE:Linux Enterprise Module for Package Hub 15 SP5
From an advisory covering 3 CVEs
 before 1.8.0.392-150200.3.39.1
1.8.0.392-150200.3.39.1
java-1_8_0-openj9
openSUSE:Leap 15.4
From an advisory covering 3 CVEs
 before 1.8.0.392-150200.3.39.1
1.8.0.392-150200.3.39.1
java-1_8_0-openj9
openSUSE:Leap 15.5
From an advisory covering 3 CVEs
 before 1.8.0.392-150200.3.39.1
1.8.0.392-150200.3.39.1
java-1_8_0-ibm
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 4 CVEs
 before 1.8.0_sr8.15-30.117.1
1.8.0_sr8.15-30.117.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 4 CVEs
 before 1.8.0_sr8.15-30.117.1
1.8.0_sr8.15-30.117.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 4 CVEs
 before 1.8.0_sr8.15-30.117.1
1.8.0_sr8.15-30.117.1
java-1_8_0-openj9
SUSE:Linux Enterprise Module for Package Hub 15 SP5
From an advisory covering 7 CVEs
 before 1.8.0.402-150200.3.42.1
1.8.0.402-150200.3.42.1
java-1_8_0-openj9
openSUSE:Leap 15.5
From an advisory covering 7 CVEs
 before 1.8.0.402-150200.3.42.1
1.8.0.402-150200.3.42.1
java-11-openj9
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 11.0.21.0-1.1
11.0.21.0-1.1
java-17-openj9
openSUSE:Tumbleweed
From an advisory covering 3 CVEs
 before 17.0.9.0-1.1
17.0.9.0-1.1
java-1_8_0-openj9
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 1.8.0.392-1.1
1.8.0.392-1.1
java-11-openj9
SUSE:Package Hub 15 SP6
From an advisory covering 58 CVEs
 before 11.0.26.0-bp156.4.3.1
11.0.26.0-bp156.4.3.1
java-11-openj9
openSUSE:Leap 15.6
From an advisory covering 58 CVEs
 before 11.0.26.0-bp156.4.3.1
11.0.26.0-bp156.4.3.1
java-17-openj9
SUSE:Package Hub 15 SP6
From an advisory covering 47 CVEs
 before 17.0.14.0-bp156.3.3.1
17.0.14.0-bp156.3.3.1
java-17-openj9
openSUSE:Leap 15.6
From an advisory covering 47 CVEs
 before 17.0.14.0-bp156.3.3.1
17.0.14.0-bp156.3.3.1

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-5676 is a medium vulnerability (CVSS 4.1) in Eclipse Openj9, published November 15, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.41%, the 35th percentile. No source names a fixed version.

References

Show 182 moreShow less
This page doesn't list everything

Left out here: the rest of 1 source description. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open