CVE-2019-10245
In Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a...
7.5 High
In Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a method to execute past the end of bytecode array causing crashes. Eclipse OpenJ9 v0.14.0 correctly detects this case and rejects the attempted class load.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
2.49%Up 0.6 points since Apr 14, 2021
What each source reports
NVD Score used
In Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a method to execute past the end of bytecode array causing crashes. Eclipse OpenJ9 v0.14.0 correctly detects this case and rejects the attempted class load.
- Record
CVE-2019-10245- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-20, CWE-119
- Updated
- 2026-11-02
CVE List No score
In Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a method to execute past the end of bytecode array causing crashes. Eclipse OpenJ9 v0.14.0 correctly detects this case and rejects the attempted class load.
- Record
CVE-2019-10245- Weakness
- CWE-20
- Updated
- 2026-11-02
EUVDEUVD-2019-2254 No score
In Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a method to execute past the end of bytecode array causing crashes. Eclipse OpenJ9 v0.14.0 correctly detects this case and rejects the attempted class load.
- Record
EUVD-2019-2254- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jq73-mhwg-56vq No score
In Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a...
In Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a method to execute past the end of bytecode array causing crashes. Eclipse OpenJ9 v0.14.0 correctly detects this case and rejects the attempted class load.
- Record
GHSA-jq73-mhwg-56vq- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV
In Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a method to execute past the end of bytecode array causing crashes. Eclipse OpenJ9 v0.14.0 correctly detects this case and rejects the attempted class load.
- Record
CVE-2019-10245- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2019:1163
Red Hat Security Advisory: java-1.8.0-ibm security update
- Record
RHSA-2019:1163- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 10 moreShow less
OSVRHSA-2019:1164
Red Hat Security Advisory: java-1.8.0-ibm security update
- Record
RHSA-2019:1164- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2019:1165
Red Hat Security Advisory: java-1.7.1-ibm security update
- Record
RHSA-2019:1165- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2019:1166
Red Hat Security Advisory: java-1.7.1-ibm security update
- Record
RHSA-2019:1166- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2019:1238
Red Hat Security Advisory: java-1.8.0-ibm security update
- Record
RHSA-2019:1238- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2019:1325
Red Hat Security Advisory: java-1.8.0-ibm security update
- Record
RHSA-2019:1325- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVSUSE-SU-2019:1308-1 No score
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues:
Update to Java 8.0 Service Refresh 5 Fix Pack 35.
Security issues fixed:
- CVE-2019-10245: Fixed Java bytecode verifier issue causing crashes (bsc#1134718).
- CVE-2019-2698: Fixed out of bounds access flaw in the 2D component (bsc#1132729).
- CVE-2019-2697: Fixed flaw inside the 2D component (bsc#1132734).
- CVE-2019-2602: Fixed flaw inside BigDecimal implementation (Component: Libraries) (bsc#1132728).
- CVE-2019-2684: Fixed flaw was found in the RMI registry implementation (bsc#1132732).
- Record
SUSE-SU-2019:1308-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:1308-2 No score
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues:
Update to Java 8.0 Service Refresh 5 Fix Pack 35.
Security issues fixed:
- CVE-2019-10245: Fixed Java bytecode verifier issue causing crashes (bsc#1134718).
- CVE-2019-2698: Fixed out of bounds access flaw in the 2D component (bsc#1132729).
- CVE-2019-2697: Fixed flaw inside the 2D component (bsc#1132734).
- CVE-2019-2602: Fixed flaw inside BigDecimal implementation (Component: Libraries) (bsc#1132728).
- CVE-2019-2684: Fixed flaw was found in the RMI registry implementation (bsc#1132732).
- Record
SUSE-SU-2019:1308-2- Updated
- 2026-11-02
OSVSUSE-SU-2019:1345-1 No score
Security update for java-1_7_1-ibm
This update for java-1_7_1-ibm fixes the following issues:
Update to Java 7.1 Service Refresh 4 Fix Pack 45.
Security issues fixed:
- CVE-2019-10245: Fixed Java bytecode verifier issue causing crashes (bsc#1134718).
- CVE-2019-2698: Fixed out of bounds access flaw in the 2D component (bsc#1132729).
- CVE-2019-2697: Fixed flaw inside the 2D component (bsc#1132734).
- CVE-2019-2602: Fixed flaw inside BigDecimal implementation (Component: Libraries) (bsc#1132728).
- CVE-2019-2684: Fixed flaw was found in the RMI registry implementation (bsc#1132732).
- Record
SUSE-SU-2019:1345-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:14059-1 No score
Security update for java-1_7_1-ibm
This update for java-1_7_1-ibm fixes the following issues:
Update to Java 7.1 Service Refresh 4 Fix Pack 45.
Security issues fixed:
- CVE-2019-10245: Fixed Java bytecode verifier issue causing crashes (bsc#1134718).
- CVE-2019-2698: Fixed out of bounds access flaw in the 2D component (bsc#1132729).
- CVE-2019-2697: Fixed flaw inside the 2D component (bsc#1132734).
- CVE-2019-2602: Fixed flaw inside BigDecimal implementation (Component: Libraries) (bsc#1132728).
- CVE-2019-2684: Fixed flaw was found in the RMI registry implementation (bsc#1132732).
- Record
SUSE-SU-2019:14059-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:1644-1 No score
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues:
Update to Java 8.0 Service Refresh 5 Fix Pack 35.
Security issues fixed:
- CVE-2019-10245: Fixed Java bytecode verifier issue causing crashes (bsc#1134718).
- CVE-2019-2698: Fixed out of bounds access flaw in the 2D component (bsc#1132729).
- CVE-2019-2697: Fixed flaw inside the 2D component (bsc#1132734).
- CVE-2019-2602: Fixed flaw inside BigDecimal implementation (Component: Libraries) (bsc#1132728).
- CVE-2019-2684: Fixed flaw was found in the RMI registry implementation (bsc#1132732).
- Record
SUSE-SU-2019:1644-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.8.0-ibmRed Hat:rhel_extras:6 From an advisory covering 5 CVEs |
before 1:1.8.0.5.35-1jpp.1.el6_10 | 1:1.8.0.5.35-1jpp.1.el6_10 |
java-1.8.0-ibm-demoRed Hat:rhel_extras:6 From an advisory covering 5 CVEs |
before 1:1.8.0.5.35-1jpp.1.el6_10 | 1:1.8.0.5.35-1jpp.1.el6_10 |
java-1.8.0-ibm-develRed Hat:rhel_extras:6 From an advisory covering 5 CVEs |
before 1:1.8.0.5.35-1jpp.1.el6_10 | 1:1.8.0.5.35-1jpp.1.el6_10 |
java-1.8.0-ibm-jdbcRed Hat:rhel_extras:6 From an advisory covering 5 CVEs |
before 1:1.8.0.5.35-1jpp.1.el6_10 | 1:1.8.0.5.35-1jpp.1.el6_10 |
java-1.8.0-ibm-pluginRed Hat:rhel_extras:6 From an advisory covering 5 CVEs |
before 1:1.8.0.5.35-1jpp.1.el6_10 | 1:1.8.0.5.35-1jpp.1.el6_10 |
java-1.8.0-ibm-srcRed Hat:rhel_extras:6 From an advisory covering 5 CVEs |
before 1:1.8.0.5.35-1jpp.1.el6_10 | 1:1.8.0.5.35-1jpp.1.el6_10 |
java-1.8.0-ibmRed Hat:rhel_extras:7 From an advisory covering 5 CVEs |
before 1:1.8.0.5.35-1jpp.1.el7 | 1:1.8.0.5.35-1jpp.1.el7 |
java-1.8.0-ibm-demoRed Hat:rhel_extras:7 From an advisory covering 5 CVEs |
before 1:1.8.0.5.35-1jpp.1.el7 | 1:1.8.0.5.35-1jpp.1.el7 |
java-1.8.0-ibm-develRed Hat:rhel_extras:7 From an advisory covering 5 CVEs |
before 1:1.8.0.5.35-1jpp.1.el7 | 1:1.8.0.5.35-1jpp.1.el7 |
java-1.8.0-ibm-jdbcRed Hat:rhel_extras:7 From an advisory covering 5 CVEs |
before 1:1.8.0.5.35-1jpp.1.el7 | 1:1.8.0.5.35-1jpp.1.el7 |
Show 54 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.8.0-ibm-pluginRed Hat:rhel_extras:7 From an advisory covering 5 CVEs |
before 1:1.8.0.5.35-1jpp.1.el7 | 1:1.8.0.5.35-1jpp.1.el7 |
java-1.8.0-ibm-srcRed Hat:rhel_extras:7 From an advisory covering 5 CVEs |
before 1:1.8.0.5.35-1jpp.1.el7 | 1:1.8.0.5.35-1jpp.1.el7 |
java-1.7.1-ibmRed Hat:rhel_extras:6 From an advisory covering 5 CVEs |
before 1:1.7.1.4.45-1jpp.1.el6_10 | 1:1.7.1.4.45-1jpp.1.el6_10 |
java-1.7.1-ibm-demoRed Hat:rhel_extras:6 From an advisory covering 5 CVEs |
before 1:1.7.1.4.45-1jpp.1.el6_10 | 1:1.7.1.4.45-1jpp.1.el6_10 |
java-1.7.1-ibm-develRed Hat:rhel_extras:6 From an advisory covering 5 CVEs |
before 1:1.7.1.4.45-1jpp.1.el6_10 | 1:1.7.1.4.45-1jpp.1.el6_10 |
java-1.7.1-ibm-jdbcRed Hat:rhel_extras:6 From an advisory covering 5 CVEs |
before 1:1.7.1.4.45-1jpp.1.el6_10 | 1:1.7.1.4.45-1jpp.1.el6_10 |
java-1.7.1-ibm-pluginRed Hat:rhel_extras:6 From an advisory covering 5 CVEs |
before 1:1.7.1.4.45-1jpp.1.el6_10 | 1:1.7.1.4.45-1jpp.1.el6_10 |
java-1.7.1-ibm-srcRed Hat:rhel_extras:6 From an advisory covering 5 CVEs |
before 1:1.7.1.4.45-1jpp.1.el6_10 | 1:1.7.1.4.45-1jpp.1.el6_10 |
java-1.7.1-ibmRed Hat:rhel_extras:7 From an advisory covering 5 CVEs |
before 1:1.7.1.4.45-1jpp.1.el7 | 1:1.7.1.4.45-1jpp.1.el7 |
java-1.7.1-ibm-demoRed Hat:rhel_extras:7 From an advisory covering 5 CVEs |
before 1:1.7.1.4.45-1jpp.1.el7 | 1:1.7.1.4.45-1jpp.1.el7 |
java-1.7.1-ibm-develRed Hat:rhel_extras:7 From an advisory covering 5 CVEs |
before 1:1.7.1.4.45-1jpp.1.el7 | 1:1.7.1.4.45-1jpp.1.el7 |
java-1.7.1-ibm-jdbcRed Hat:rhel_extras:7 From an advisory covering 5 CVEs |
before 1:1.7.1.4.45-1jpp.1.el7 | 1:1.7.1.4.45-1jpp.1.el7 |
java-1.7.1-ibm-pluginRed Hat:rhel_extras:7 From an advisory covering 5 CVEs |
before 1:1.7.1.4.45-1jpp.1.el7 | 1:1.7.1.4.45-1jpp.1.el7 |
java-1.7.1-ibm-srcRed Hat:rhel_extras:7 From an advisory covering 5 CVEs |
before 1:1.7.1.4.45-1jpp.1.el7 | 1:1.7.1.4.45-1jpp.1.el7 |
java-1.8.0-ibmRed Hat:enterprise_linux:8::supplementary From an advisory covering 10 CVEs |
before 1:1.8.0.5.35-3.el8_0 | 1:1.8.0.5.35-3.el8_0 |
java-1.8.0-ibm-demoRed Hat:enterprise_linux:8::supplementary From an advisory covering 10 CVEs |
before 1:1.8.0.5.35-3.el8_0 | 1:1.8.0.5.35-3.el8_0 |
java-1.8.0-ibm-develRed Hat:enterprise_linux:8::supplementary From an advisory covering 10 CVEs |
before 1:1.8.0.5.35-3.el8_0 | 1:1.8.0.5.35-3.el8_0 |
java-1.8.0-ibm-headlessRed Hat:enterprise_linux:8::supplementary From an advisory covering 10 CVEs |
before 1:1.8.0.5.35-3.el8_0 | 1:1.8.0.5.35-3.el8_0 |
java-1.8.0-ibm-jdbcRed Hat:enterprise_linux:8::supplementary From an advisory covering 10 CVEs |
before 1:1.8.0.5.35-3.el8_0 | 1:1.8.0.5.35-3.el8_0 |
java-1.8.0-ibm-pluginRed Hat:enterprise_linux:8::supplementary From an advisory covering 10 CVEs |
before 1:1.8.0.5.35-3.el8_0 | 1:1.8.0.5.35-3.el8_0 |
java-1.8.0-ibm-srcRed Hat:enterprise_linux:8::supplementary From an advisory covering 10 CVEs |
before 1:1.8.0.5.35-3.el8_0 | 1:1.8.0.5.35-3.el8_0 |
java-1.8.0-ibm-webstartRed Hat:enterprise_linux:8::supplementary From an advisory covering 10 CVEs |
before 1:1.8.0.5.35-3.el8_0 | 1:1.8.0.5.35-3.el8_0 |
java-1.8.0-ibmRed Hat:network_satellite:5.8::el6 From an advisory covering 5 CVEs |
before 1:1.8.0.5.35-1jpp.1.el6_10 | 1:1.8.0.5.35-1jpp.1.el6_10 |
java-1.8.0-ibm-develRed Hat:network_satellite:5.8::el6 From an advisory covering 5 CVEs |
before 1:1.8.0.5.35-1jpp.1.el6_10 | 1:1.8.0.5.35-1jpp.1.el6_10 |
java-1_8_0-ibmSUSE:Linux Enterprise Module for Legacy 15 From an advisory covering 5 CVEs |
before 1.8.0_sr5.35-3.20.1 | 1.8.0_sr5.35-3.20.1 |
java-1_8_0-ibmSUSE:Linux Enterprise Module for Legacy 15 SP1 From an advisory covering 5 CVEs |
before 1.8.0_sr5.35-3.20.1 | 1.8.0_sr5.35-3.20.1 |
java-1_7_1-ibmSUSE:OpenStack Cloud 7 From an advisory covering 5 CVEs |
before 1.7.1_sr4.45-38.37.1 | 1.7.1_sr4.45-38.37.1 |
java-1_7_1-ibmSUSE:Linux Enterprise Server for SAP Applications 12 SP1 From an advisory covering 5 CVEs |
before 1.7.1_sr4.45-38.37.1 | 1.7.1_sr4.45-38.37.1 |
java-1_7_1-ibmSUSE:Linux Enterprise Server for SAP Applications 12 SP2 From an advisory covering 5 CVEs |
before 1.7.1_sr4.45-38.37.1 | 1.7.1_sr4.45-38.37.1 |
java-1_7_1-ibmSUSE:Linux Enterprise Software Development Kit 12 SP3 From an advisory covering 5 CVEs |
before 1.7.1_sr4.45-38.37.1 | 1.7.1_sr4.45-38.37.1 |
java-1_7_1-ibmSUSE:Linux Enterprise Software Development Kit 12 SP4 From an advisory covering 5 CVEs |
before 1.7.1_sr4.45-38.37.1 | 1.7.1_sr4.45-38.37.1 |
java-1_7_1-ibmSUSE:Linux Enterprise Server 12-LTSS From an advisory covering 5 CVEs |
before 1.7.1_sr4.45-38.37.1 | 1.7.1_sr4.45-38.37.1 |
java-1_7_1-ibmSUSE:Linux Enterprise Server 12 SP1-LTSS From an advisory covering 5 CVEs |
before 1.7.1_sr4.45-38.37.1 | 1.7.1_sr4.45-38.37.1 |
java-1_7_1-ibmSUSE:Linux Enterprise Server 12 SP2-LTSS From an advisory covering 5 CVEs |
before 1.7.1_sr4.45-38.37.1 | 1.7.1_sr4.45-38.37.1 |
java-1_7_1-ibmSUSE:Linux Enterprise Server 12 SP2-BCL From an advisory covering 5 CVEs |
before 1.7.1_sr4.45-38.37.1 | 1.7.1_sr4.45-38.37.1 |
java-1_7_1-ibmSUSE:Linux Enterprise Server 12 SP3 From an advisory covering 5 CVEs |
before 1.7.1_sr4.45-38.37.1 | 1.7.1_sr4.45-38.37.1 |
java-1_7_1-ibmSUSE:Linux Enterprise Server for SAP Applications 12 SP3 From an advisory covering 5 CVEs |
before 1.7.1_sr4.45-38.37.1 | 1.7.1_sr4.45-38.37.1 |
java-1_7_1-ibmSUSE:Linux Enterprise Server 12 SP4 From an advisory covering 5 CVEs |
before 1.7.1_sr4.45-38.37.1 | 1.7.1_sr4.45-38.37.1 |
java-1_7_1-ibmSUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 5 CVEs |
before 1.7.1_sr4.45-38.37.1 | 1.7.1_sr4.45-38.37.1 |
java-1_7_1-ibmSUSE:Enterprise Storage 4 From an advisory covering 5 CVEs |
before 1.7.1_sr4.45-38.37.1 | 1.7.1_sr4.45-38.37.1 |
java-1_7_1-ibmSUSE:Linux Enterprise Server 11 SP4-LTSS From an advisory covering 5 CVEs |
before 1.7.1_sr4.45-26.40.1 | 1.7.1_sr4.45-26.40.1 |
java-1_8_0-ibmSUSE:OpenStack Cloud 7 From an advisory covering 5 CVEs |
before 1.8.0_sr5.35-30.50.1 | 1.8.0_sr5.35-30.50.1 |
java-1_8_0-ibmSUSE:Linux Enterprise Server for SAP Applications 12 SP1 From an advisory covering 5 CVEs |
before 1.8.0_sr5.35-30.50.1 | 1.8.0_sr5.35-30.50.1 |
java-1_8_0-ibmSUSE:Linux Enterprise Server for SAP Applications 12 SP2 From an advisory covering 5 CVEs |
before 1.8.0_sr5.35-30.50.1 | 1.8.0_sr5.35-30.50.1 |
java-1_8_0-ibmSUSE:Linux Enterprise Software Development Kit 12 SP3 From an advisory covering 5 CVEs |
before 1.8.0_sr5.35-30.50.1 | 1.8.0_sr5.35-30.50.1 |
java-1_8_0-ibmSUSE:Linux Enterprise Software Development Kit 12 SP4 From an advisory covering 5 CVEs |
before 1.8.0_sr5.35-30.50.1 | 1.8.0_sr5.35-30.50.1 |
java-1_8_0-ibmSUSE:Linux Enterprise Server 12 SP1-LTSS From an advisory covering 5 CVEs |
before 1.8.0_sr5.35-30.50.1 | 1.8.0_sr5.35-30.50.1 |
java-1_8_0-ibmSUSE:Linux Enterprise Server 12 SP2-LTSS From an advisory covering 5 CVEs |
before 1.8.0_sr5.35-30.50.1 | 1.8.0_sr5.35-30.50.1 |
java-1_8_0-ibmSUSE:Linux Enterprise Server 12 SP2-BCL From an advisory covering 5 CVEs |
before 1.8.0_sr5.35-30.50.1 | 1.8.0_sr5.35-30.50.1 |
java-1_8_0-ibmSUSE:Linux Enterprise Server 12 SP3 From an advisory covering 5 CVEs |
before 1.8.0_sr5.35-30.50.1 | 1.8.0_sr5.35-30.50.1 |
java-1_8_0-ibmSUSE:Linux Enterprise Server for SAP Applications 12 SP3 From an advisory covering 5 CVEs |
before 1.8.0_sr5.35-30.50.1 | 1.8.0_sr5.35-30.50.1 |
java-1_8_0-ibmSUSE:Linux Enterprise Server 12 SP4 From an advisory covering 5 CVEs |
before 1.8.0_sr5.35-30.50.1 | 1.8.0_sr5.35-30.50.1 |
java-1_8_0-ibmSUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 5 CVEs |
before 1.8.0_sr5.35-30.50.1 | 1.8.0_sr5.35-30.50.1 |
java-1_8_0-ibmSUSE:Enterprise Storage 4 From an advisory covering 5 CVEs |
before 1.8.0_sr5.35-30.50.1 | 1.8.0_sr5.35-30.50.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases, products | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-10245 is a high vulnerability (CVSS 7.5) in Eclipse Openj9, published April 19, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.49%, the 84th percentile. No source names a fixed version.
References
bugs.eclipse.org/bugs/show_bug.cgi?id=545588
securityfocus.com/bid/108094
access.redhat.com/errata/RHSA-2019:1164
Show 67 moreShow less
nvd.nist.gov/vuln/detail/CVE-2019-10245
github.com/advisories/GHSA-jq73-mhwg-56vq
bugzilla.redhat.com/show_bug.cgi?id=1700440
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1163.json
cve.org/CVERecord?id=CVE-2019-2602
oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
suse.com/support/update/announcement/2019/suse-su-20191308-1
bugzilla.suse.com/1132728