CVE-2019-17639
In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method...
In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the source or destination array can, in certain specially crafted code patterns, cause the current method to return prematurely with an undefined return value. This allows whatever value happens to be in the return register at that time to be used as if it matches the method's declared return type.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
5.3
In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the source or destination array can, in certain specially crafted code patterns, cause the current method to return prematurely with an undefined return value. This allows whatever value happens to be in the return register at that time to be used as if it matches the method's declared return type.
- Record
CVE-2019-17639- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-843
- Updated
- 2026-11-02
CVE List No score
In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the source or destination array can, in certain specially crafted code patterns, cause the current method to return prematurely with an undefined return value. This allows whatever value happens to be in the return register at that time to be used as if it matches the method's declared return type.
- Record
CVE-2019-17639- Weakness
- CWE-843
- Updated
- 2026-11-02
EUVDEUVD-2019-7949 No score
In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the source or destination array can, in certain specially crafted code patterns, cause the current method to return prematurely with an undefined return value. This allows whatever value happens to be in the return register at that time to be used as if it matches the method's declared return type.
- Record
EUVD-2019-7949- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rm33-h23j-qcgg No score
In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method...
In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the source or destination array can, in certain specially crafted code patterns, cause the current method to return prematurely with an undefined return value. This allows whatever value happens to be in the return register at that time to be used as if it matches the method's declared return type.
- Record
GHSA-rm33-h23j-qcgg- Updated
- 2026-11-02
OSV
5.3
In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the source or destination array can, in certain specially crafted code patterns, cause the current method to return prematurely with an undefined return value. This allows whatever value happens to be in the return register at that time to be used as if it matches the method's declared return type.
- Record
CVE-2019-17639- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVRHSA-2020:3386
8.3
Red Hat Security Advisory: java-1.8.0-ibm security update
- Record
RHSA-2020:3386- CVSS 3.1
- 8.3 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
Show 8 moreShow less
OSVRHSA-2020:3387
8.3
Red Hat Security Advisory: java-1.7.1-ibm security update
- Record
RHSA-2020:3387- CVSS 3.1
- 8.3 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2020:3388
8.3
Red Hat Security Advisory: java-1.7.1-ibm security update
- Record
RHSA-2020:3388- CVSS 3.1
- 8.3 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2020:5585
8.3
Red Hat Security Advisory: java-1.8.0-ibm security update
- Record
RHSA-2020:5585- CVSS 3.1
- 8.3 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVSUSE-SU-2020:14482-1 No score
Security update for java-1_7_0-ibm
This update for java-1_7_0-ibm fixes the following issues:
-
Update to Java 7.0 Service Refresh 10 Fix Pack 70 [bsc#1175259, bsc#1174157] CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583 CVE-2019-17639
- Class Libraries:
- TRANSLATION MESSAGES UPDATE FOR JCL
- UPDATE TIMEZONE INFORMATION TO TZDATA2020A
- Security:
- CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO NON DEFAULT VALUE
- Class Libraries:
-
The pack200 and unpack200 alternatives should be slaves of java [bsc#1171352]
- Record
SUSE-SU-2020:14482-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:14484-1 No score
Security update for java-1_7_1-ibm
This update for java-1_7_1-ibm fixes the following issues:
- Update to Java 7.1 Service Refresh 4 Fix Pack 70 [bsc#1175259, bsc#1174157]
CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14621
CVE-2020-14593 CVE-2020-14583 CVE-2019-17639
- Class Libraries:
- UPDATE TIMEZONE INFORMATION TO TZDATA2020A
- Security:
- CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO NON DEFAULT VALUE
- Class Libraries:
- Record
SUSE-SU-2020:14484-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:2453-1 No score
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues:
- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
CVE-2019-17639
- Class Libraries:
- JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
- JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
- TRANSLATION MESSAGES UPDATE FOR JCL
- UPDATE TIMEZONE INFORMATION TO TZDATA2020A
- Java Virtual Machine:
- IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
- LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
- JIT Compiler:
- CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD IN DEBUGGING MODE
- INTERMITTENT ASSERTION FAILURE REPORTED
- CRASH IN RESOLVECLASSREF() DURING AOT LOAD
- JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
- SEGMENTATION FAULT WHILE COMPILING A METHOD
- UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL APPLICATION ON IBM Z PLATFORM
- Security:
- CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO NON DEFAULT VALUE
- CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
- IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
- IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM KEYFACTORY CLASS
- Class Libraries:
- Record
SUSE-SU-2020:2453-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:2461-1 No score
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues:
- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
CVE-2019-17639
- Class Libraries:
- JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
- JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
- TRANSLATION MESSAGES UPDATE FOR JCL
- UPDATE TIMEZONE INFORMATION TO TZDATA2020A
- Java Virtual Machine:
- IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
- LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
- JIT Compiler:
- CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD IN DEBUGGING MODE
- INTERMITTENT ASSERTION FAILURE REPORTED
- CRASH IN RESOLVECLASSREF() DURING AOT LOAD
- JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
- SEGMENTATION FAULT WHILE COMPILING A METHOD
- UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL APPLICATION ON IBM Z PLATFORM
- Security:
- CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO NON DEFAULT VALUE
- CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
- IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
- IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM KEYFACTORY CLASS
- Class Libraries:
- Record
SUSE-SU-2020:2461-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:2482-1 No score
Security update for java-1_7_1-ibm
This update for java-1_7_1-ibm fixes the following issues:
- Update to Java 7.1 Service Refresh 4 Fix Pack 70 [bsc#1175259, bsc#1174157]
CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14621
CVE-2020-14593 CVE-2020-14583 CVE-2019-17639
- Class Libraries:
- UPDATE TIMEZONE INFORMATION TO TZDATA2020A
- Security:
- CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO NON DEFAULT VALUE
- Class Libraries:
- Record
SUSE-SU-2020:2482-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.8.0-ibmRed Hat:enterprise_linux:8::supplementary |
before 1:1.8.0.6.15-1.el8_2 | 1:1.8.0.6.15-1.el8_2 |
java-1.8.0-ibm-demoRed Hat:enterprise_linux:8::supplementary |
before 1:1.8.0.6.15-1.el8_2 | 1:1.8.0.6.15-1.el8_2 |
java-1.8.0-ibm-develRed Hat:enterprise_linux:8::supplementary |
before 1:1.8.0.6.15-1.el8_2 | 1:1.8.0.6.15-1.el8_2 |
java-1.8.0-ibm-headlessRed Hat:enterprise_linux:8::supplementary |
before 1:1.8.0.6.15-1.el8_2 | 1:1.8.0.6.15-1.el8_2 |
java-1.8.0-ibm-jdbcRed Hat:enterprise_linux:8::supplementary |
before 1:1.8.0.6.15-1.el8_2 | 1:1.8.0.6.15-1.el8_2 |
java-1.8.0-ibm-pluginRed Hat:enterprise_linux:8::supplementary |
before 1:1.8.0.6.15-1.el8_2 | 1:1.8.0.6.15-1.el8_2 |
java-1.8.0-ibm-srcRed Hat:enterprise_linux:8::supplementary |
before 1:1.8.0.6.15-1.el8_2 | 1:1.8.0.6.15-1.el8_2 |
java-1.8.0-ibm-webstartRed Hat:enterprise_linux:8::supplementary |
before 1:1.8.0.6.15-1.el8_2 | 1:1.8.0.6.15-1.el8_2 |
java-1.7.1-ibmRed Hat:rhel_extras:6 |
before 1:1.7.1.4.70-1jpp.1.el6_10 | 1:1.7.1.4.70-1jpp.1.el6_10 |
java-1.7.1-ibm-demoRed Hat:rhel_extras:6 |
before 1:1.7.1.4.70-1jpp.1.el6_10 | 1:1.7.1.4.70-1jpp.1.el6_10 |
Show 57 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.7.1-ibm-develRed Hat:rhel_extras:6 |
before 1:1.7.1.4.70-1jpp.1.el6_10 | 1:1.7.1.4.70-1jpp.1.el6_10 |
java-1.7.1-ibm-jdbcRed Hat:rhel_extras:6 |
before 1:1.7.1.4.70-1jpp.1.el6_10 | 1:1.7.1.4.70-1jpp.1.el6_10 |
java-1.7.1-ibm-pluginRed Hat:rhel_extras:6 |
before 1:1.7.1.4.70-1jpp.1.el6_10 | 1:1.7.1.4.70-1jpp.1.el6_10 |
java-1.7.1-ibm-srcRed Hat:rhel_extras:6 |
before 1:1.7.1.4.70-1jpp.1.el6_10 | 1:1.7.1.4.70-1jpp.1.el6_10 |
java-1.7.1-ibmRed Hat:rhel_extras:7 |
before 1:1.7.1.4.70-1jpp.1.el7 | 1:1.7.1.4.70-1jpp.1.el7 |
java-1.7.1-ibm-demoRed Hat:rhel_extras:7 |
before 1:1.7.1.4.70-1jpp.1.el7 | 1:1.7.1.4.70-1jpp.1.el7 |
java-1.7.1-ibm-develRed Hat:rhel_extras:7 |
before 1:1.7.1.4.70-1jpp.1.el7 | 1:1.7.1.4.70-1jpp.1.el7 |
java-1.7.1-ibm-jdbcRed Hat:rhel_extras:7 |
before 1:1.7.1.4.70-1jpp.1.el7 | 1:1.7.1.4.70-1jpp.1.el7 |
java-1.7.1-ibm-pluginRed Hat:rhel_extras:7 |
before 1:1.7.1.4.70-1jpp.1.el7 | 1:1.7.1.4.70-1jpp.1.el7 |
java-1.7.1-ibm-srcRed Hat:rhel_extras:7 |
before 1:1.7.1.4.70-1jpp.1.el7 | 1:1.7.1.4.70-1jpp.1.el7 |
java-1.8.0-ibmRed Hat:rhel_extras:7 |
before 1:1.8.0.6.20-1jpp.1.el7 | 1:1.8.0.6.20-1jpp.1.el7 |
java-1.8.0-ibm-demoRed Hat:rhel_extras:7 |
before 1:1.8.0.6.20-1jpp.1.el7 | 1:1.8.0.6.20-1jpp.1.el7 |
java-1.8.0-ibm-develRed Hat:rhel_extras:7 |
before 1:1.8.0.6.20-1jpp.1.el7 | 1:1.8.0.6.20-1jpp.1.el7 |
java-1.8.0-ibm-jdbcRed Hat:rhel_extras:7 |
before 1:1.8.0.6.20-1jpp.1.el7 | 1:1.8.0.6.20-1jpp.1.el7 |
java-1.8.0-ibm-pluginRed Hat:rhel_extras:7 |
before 1:1.8.0.6.20-1jpp.1.el7 | 1:1.8.0.6.20-1jpp.1.el7 |
java-1.8.0-ibm-srcRed Hat:rhel_extras:7 |
before 1:1.8.0.6.20-1jpp.1.el7 | 1:1.8.0.6.20-1jpp.1.el7 |
java-1_7_0-ibmSUSE:Linux Enterprise Point of Sale 11 SP3 |
before 1.7.0_sr10.70-65.54.1 | 1.7.0_sr10.70-65.54.1 |
java-1_7_1-ibmSUSE:Linux Enterprise Server 11 SP4-LTSS |
before 1.7.1_sr4.70-26.58.1 | 1.7.1_sr4.70-26.58.1 |
java-1_8_0-ibmSUSE:Linux Enterprise Module for Legacy 15 SP1 |
before 1.8.0_sr6.15-3.41.1 | 1.8.0_sr6.15-3.41.1 |
java-1_8_0-ibmSUSE:Linux Enterprise Module for Legacy 15 SP2 |
before 1.8.0_sr6.15-3.41.1 | 1.8.0_sr6.15-3.41.1 |
java-1_8_0-ibmSUSE:Linux Enterprise Server 15-LTSS |
before 1.8.0_sr6.15-3.41.1 | 1.8.0_sr6.15-3.41.1 |
java-1_8_0-ibmSUSE:Linux Enterprise Server for SAP Applications 15 |
before 1.8.0_sr6.15-3.41.1 | 1.8.0_sr6.15-3.41.1 |
java-1_8_0-ibmSUSE:HPE Helion OpenStack 8 |
before 1.8.0_sr6.15-30.72.1 | 1.8.0_sr6.15-30.72.1 |
java-1_8_0-ibmSUSE:OpenStack Cloud 7 |
before 1.8.0_sr6.15-30.72.1 | 1.8.0_sr6.15-30.72.1 |
java-1_8_0-ibmSUSE:OpenStack Cloud 8 |
before 1.8.0_sr6.15-30.72.1 | 1.8.0_sr6.15-30.72.1 |
java-1_8_0-ibmSUSE:OpenStack Cloud 9 |
before 1.8.0_sr6.15-30.72.1 | 1.8.0_sr6.15-30.72.1 |
java-1_8_0-ibmSUSE:OpenStack Cloud Crowbar 8 |
before 1.8.0_sr6.15-30.72.1 | 1.8.0_sr6.15-30.72.1 |
java-1_8_0-ibmSUSE:OpenStack Cloud Crowbar 9 |
before 1.8.0_sr6.15-30.72.1 | 1.8.0_sr6.15-30.72.1 |
java-1_8_0-ibmSUSE:Linux Enterprise Server for SAP Applications 12 SP2 |
before 1.8.0_sr6.15-30.72.1 | 1.8.0_sr6.15-30.72.1 |
java-1_8_0-ibmSUSE:Linux Enterprise Server for SAP Applications 12 SP3 |
before 1.8.0_sr6.15-30.72.1 | 1.8.0_sr6.15-30.72.1 |
java-1_8_0-ibmSUSE:Linux Enterprise Server for SAP Applications 12 SP4 |
before 1.8.0_sr6.15-30.72.1 | 1.8.0_sr6.15-30.72.1 |
java-1_8_0-ibmSUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 1.8.0_sr6.15-30.72.1 | 1.8.0_sr6.15-30.72.1 |
java-1_8_0-ibmSUSE:Linux Enterprise Server 12 SP2-LTSS |
before 1.8.0_sr6.15-30.72.1 | 1.8.0_sr6.15-30.72.1 |
java-1_8_0-ibmSUSE:Linux Enterprise Server 12 SP2-BCL |
before 1.8.0_sr6.15-30.72.1 | 1.8.0_sr6.15-30.72.1 |
java-1_8_0-ibmSUSE:Linux Enterprise Server 12 SP3-LTSS |
before 1.8.0_sr6.15-30.72.1 | 1.8.0_sr6.15-30.72.1 |
java-1_8_0-ibmSUSE:Linux Enterprise Server 12 SP3-BCL |
before 1.8.0_sr6.15-30.72.1 | 1.8.0_sr6.15-30.72.1 |
java-1_8_0-ibmSUSE:Linux Enterprise Server 12 SP4-LTSS |
before 1.8.0_sr6.15-30.72.1 | 1.8.0_sr6.15-30.72.1 |
java-1_8_0-ibmSUSE:Linux Enterprise Server 12 SP5 |
before 1.8.0_sr6.15-30.72.1 | 1.8.0_sr6.15-30.72.1 |
java-1_8_0-ibmSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 1.8.0_sr6.15-30.72.1 | 1.8.0_sr6.15-30.72.1 |
java-1_7_1-ibmSUSE:HPE Helion OpenStack 8 |
before 1.7.1_sr4.70-38.56.1 | 1.7.1_sr4.70-38.56.1 |
java-1_7_1-ibmSUSE:OpenStack Cloud 7 |
before 1.7.1_sr4.70-38.56.1 | 1.7.1_sr4.70-38.56.1 |
java-1_7_1-ibmSUSE:OpenStack Cloud 8 |
before 1.7.1_sr4.70-38.56.1 | 1.7.1_sr4.70-38.56.1 |
java-1_7_1-ibmSUSE:OpenStack Cloud 9 |
before 1.7.1_sr4.70-38.56.1 | 1.7.1_sr4.70-38.56.1 |
java-1_7_1-ibmSUSE:OpenStack Cloud Crowbar 8 |
before 1.7.1_sr4.70-38.56.1 | 1.7.1_sr4.70-38.56.1 |
java-1_7_1-ibmSUSE:OpenStack Cloud Crowbar 9 |
before 1.7.1_sr4.70-38.56.1 | 1.7.1_sr4.70-38.56.1 |
java-1_7_1-ibmSUSE:Linux Enterprise Server for SAP Applications 12 SP2 |
before 1.7.1_sr4.70-38.56.1 | 1.7.1_sr4.70-38.56.1 |
java-1_7_1-ibmSUSE:Linux Enterprise Server for SAP Applications 12 SP3 |
before 1.7.1_sr4.70-38.56.1 | 1.7.1_sr4.70-38.56.1 |
java-1_7_1-ibmSUSE:Linux Enterprise Server for SAP Applications 12 SP4 |
before 1.7.1_sr4.70-38.56.1 | 1.7.1_sr4.70-38.56.1 |
java-1_7_1-ibmSUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 1.7.1_sr4.70-38.56.1 | 1.7.1_sr4.70-38.56.1 |
java-1_7_1-ibmSUSE:Linux Enterprise Server 12 SP2-LTSS |
before 1.7.1_sr4.70-38.56.1 | 1.7.1_sr4.70-38.56.1 |
java-1_7_1-ibmSUSE:Linux Enterprise Server 12 SP2-BCL |
before 1.7.1_sr4.70-38.56.1 | 1.7.1_sr4.70-38.56.1 |
java-1_7_1-ibmSUSE:Linux Enterprise Server 12 SP3-LTSS |
before 1.7.1_sr4.70-38.56.1 | 1.7.1_sr4.70-38.56.1 |
java-1_7_1-ibmSUSE:Linux Enterprise Server 12 SP3-BCL |
before 1.7.1_sr4.70-38.56.1 | 1.7.1_sr4.70-38.56.1 |
java-1_7_1-ibmSUSE:Linux Enterprise Server 12 SP4-LTSS |
before 1.7.1_sr4.70-38.56.1 | 1.7.1_sr4.70-38.56.1 |
java-1_7_1-ibmSUSE:Linux Enterprise Server 12 SP5 |
before 1.7.1_sr4.70-38.56.1 | 1.7.1_sr4.70-38.56.1 |
java-1_7_1-ibmSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 1.7.1_sr4.70-38.56.1 | 1.7.1_sr4.70-38.56.1 |
java-1_7_1-ibmSUSE:Enterprise Storage 5 |
before 1.7.1_sr4.70-38.56.1 | 1.7.1_sr4.70-38.56.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, products | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-17639 is a medium vulnerability (CVSS 5.3) in Eclipse Openj9, published July 15, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.50%, the 74th percentile. Fixed in java-1.8.0-ibm 1:1.8.0.6.15-1.el8_2.
References
bugs.eclipse.org/bugs/show_bug.cgi?id=563998
nvd.nist.gov/vuln/detail/CVE-2019-17639
github.com/advisories/GHSA-rm33-h23j-qcgg
access.redhat.com/errata/RHSA-2020:3386
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=1790556
Show 74 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=1790570
bugzilla.redhat.com/show_bug.cgi?id=1856448
bugzilla.redhat.com/show_bug.cgi?id=1856784
bugzilla.redhat.com/show_bug.cgi?id=1856885
bugzilla.redhat.com/show_bug.cgi?id=1856896
bugzilla.redhat.com/show_bug.cgi?id=1856988
bugzilla.redhat.com/show_bug.cgi?id=1856991
bugzilla.redhat.com/show_bug.cgi?id=1856995
bugzilla.redhat.com/show_bug.cgi?id=1866497
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3386.json
access.redhat.com/security/cve/CVE-2019-17639
cve.org/CVERecord?id=CVE-2019-17639
access.redhat.com/security/cve/CVE-2020-2590
cve.org/CVERecord?id=CVE-2020-2590
nvd.nist.gov/vuln/detail/CVE-2020-2590
access.redhat.com/security/cve/CVE-2020-2601
cve.org/CVERecord?id=CVE-2020-2601
nvd.nist.gov/vuln/detail/CVE-2020-2601
access.redhat.com/security/cve/CVE-2020-14556
cve.org/CVERecord?id=CVE-2020-14556
nvd.nist.gov/vuln/detail/CVE-2020-14556
access.redhat.com/security/cve/CVE-2020-14577
cve.org/CVERecord?id=CVE-2020-14577
nvd.nist.gov/vuln/detail/CVE-2020-14577
access.redhat.com/security/cve/CVE-2020-14578
cve.org/CVERecord?id=CVE-2020-14578
nvd.nist.gov/vuln/detail/CVE-2020-14578
access.redhat.com/security/cve/CVE-2020-14579
cve.org/CVERecord?id=CVE-2020-14579
nvd.nist.gov/vuln/detail/CVE-2020-14579
access.redhat.com/security/cve/CVE-2020-14583
cve.org/CVERecord?id=CVE-2020-14583
nvd.nist.gov/vuln/detail/CVE-2020-14583
access.redhat.com/security/cve/CVE-2020-14593
cve.org/CVERecord?id=CVE-2020-14593
nvd.nist.gov/vuln/detail/CVE-2020-14593
access.redhat.com/security/cve/CVE-2020-14621
cve.org/CVERecord?id=CVE-2020-14621
nvd.nist.gov/vuln/detail/CVE-2020-14621
access.redhat.com/errata/RHSA-2020:3387
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3387.json
access.redhat.com/errata/RHSA-2020:3388
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3388.json
access.redhat.com/errata/RHSA-2020:5585
bugzilla.redhat.com/show_bug.cgi?id=1889271
bugzilla.redhat.com/show_bug.cgi?id=1889697
bugzilla.redhat.com/show_bug.cgi?id=1889717
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5585.json
access.redhat.com/security/cve/CVE-2020-14779
cve.org/CVERecord?id=CVE-2020-14779
nvd.nist.gov/vuln/detail/CVE-2020-14779
access.redhat.com/security/cve/CVE-2020-14796
cve.org/CVERecord?id=CVE-2020-14796
nvd.nist.gov/vuln/detail/CVE-2020-14796
access.redhat.com/security/cve/CVE-2020-14797
cve.org/CVERecord?id=CVE-2020-14797
nvd.nist.gov/vuln/detail/CVE-2020-14797
suse.com/support/update/announcement/2020/suse-su-202014482-1
bugzilla.suse.com/1171352
bugzilla.suse.com/1174157
bugzilla.suse.com/1175259
suse.com/security/cve/CVE-2019-17639
suse.com/security/cve/CVE-2020-14577
suse.com/security/cve/CVE-2020-14578
suse.com/security/cve/CVE-2020-14579
suse.com/security/cve/CVE-2020-14583
suse.com/security/cve/CVE-2020-14593
suse.com/security/cve/CVE-2020-14621
suse.com/support/update/announcement/2020/suse-su-202014484-1
suse.com/support/update/announcement/2020/suse-su-20202453-1
suse.com/security/cve/CVE-2020-14556
suse.com/security/cve/CVE-2020-14581
suse.com/support/update/announcement/2020/suse-su-20202461-1
suse.com/support/update/announcement/2020/suse-su-20202482-1