{"id":"CVE-2019-10245","aliases":["EUVD-2019-2254","GHSA-jq73-mhwg-56vq","RHSA-2019:1163","RHSA-2019:1164","RHSA-2019:1165","RHSA-2019:1166","RHSA-2019:1238","RHSA-2019:1325","SUSE-SU-2019:1308-1","SUSE-SU-2019:1308-2","SUSE-SU-2019:1345-1","SUSE-SU-2019:14059-1","SUSE-SU-2019:1644-1"],"status":"published","title":"In Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a...","description":"In Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a method to execute past the end of bytecode array causing crashes. Eclipse OpenJ9 v0.14.0 correctly detects this case and rejects the attempted class load.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02492,"percentile":0.84773,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119","CWE-20"],"published":"2019-04-19T13:43:31Z","modified":"2026-10-24T10:30:35Z","affected":[{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.35-1jpp.1.el6_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.35-1jpp.1.el6_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.35-1jpp.1.el6_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.35-1jpp.1.el6_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.35-1jpp.1.el6_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.35-1jpp.1.el6_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.35-1jpp.1.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.35-1jpp.1.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.35-1jpp.1.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.35-1jpp.1.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.35-1jpp.1.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.35-1jpp.1.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.45-1jpp.1.el6_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.45-1jpp.1.el6_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.45-1jpp.1.el6_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.45-1jpp.1.el6_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.45-1jpp.1.el6_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.45-1jpp.1.el6_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.45-1jpp.1.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.45-1jpp.1.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.45-1jpp.1.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.45-1jpp.1.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.45-1jpp.1.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.45-1jpp.1.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::supplementary","package":"java-1.8.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.35-3.el8_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::supplementary","package":"java-1.8.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.35-3.el8_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::supplementary","package":"java-1.8.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.35-3.el8_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::supplementary","package":"java-1.8.0-ibm-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.35-3.el8_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::supplementary","package":"java-1.8.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.35-3.el8_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::supplementary","package":"java-1.8.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.35-3.el8_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::supplementary","package":"java-1.8.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.35-3.el8_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::supplementary","package":"java-1.8.0-ibm-webstart","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.35-3.el8_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.8::el6","package":"java-1.8.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.35-1jpp.1.el6_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.8::el6","package":"java-1.8.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.35-1jpp.1.el6_10"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.35-3.20.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP1","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.35-3.20.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.45-38.37.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.45-38.37.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.45-38.37.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.45-38.37.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.45-38.37.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.45-38.37.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.45-38.37.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.45-38.37.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.45-38.37.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.45-38.37.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.45-38.37.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.45-38.37.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.45-38.37.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.45-38.37.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.45-26.40.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.35-30.50.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.35-30.50.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.35-30.50.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.35-30.50.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.35-30.50.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.35-30.50.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.35-30.50.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.35-30.50.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.35-30.50.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.35-30.50.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.35-30.50.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.35-30.50.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.35-30.50.1"}]}],"bundled":5}],"products":[{"vendor":"eclipse","product":"openj9"},{"vendor":"eclipse foundation","product":"eclipse openj9"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_workstation"},{"vendor":"redhat","product":"satellite"},{"vendor":"the eclipse foundation","product":"eclipse openj9"}],"references":[{"url":"https://bugs.eclipse.org/bugs/show_bug.cgi?id=545588","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"http://www.securityfocus.com/bid/108094","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1164","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1163","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1165","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1166","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1238","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1325","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10245","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-jq73-mhwg-56vq"},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1700440","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1700447","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1700564","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1704480","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1704799","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1163.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-2602","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-2602","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-2602","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-2684","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-2684","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-2684","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-2697","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-2697","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-2697","tags":["advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html#AppendixJAVA","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-2698","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-2698","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-2698","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-10245","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-10245","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1164.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1165.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1166.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1579973","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1665945","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1685601","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1685611","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1685717","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1238.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-11212","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-11212","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-11212","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-12547","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-12547","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12547","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-12549","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-12549","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12549","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-2422","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-2422","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-2422","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-2449","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-2449","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-2449","tags":["advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html#AppendixJAVA","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1325.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191308-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1132728","tags":["report"]},{"url":"https://bugzilla.suse.com/1132729","tags":["report"]},{"url":"https://bugzilla.suse.com/1132732","tags":["report"]},{"url":"https://bugzilla.suse.com/1132734","tags":["report"]},{"url":"https://bugzilla.suse.com/1134718","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10245","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2684","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2697","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2698","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191308-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191345-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-201914059-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191644-1/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2019-10245","description":"In Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a method to execute past the end of bytecode array causing crashes. Eclipse OpenJ9 v0.14.0 correctly detects this case and rejects the attempted class load.","status":"published","published":"2019-04-19T13:43:31Z","modified":"2024-08-04T22:17:19.773Z","cwes":["CWE-20"],"updated_at":"2026-11-02T14:20:19.399352Z"}],"euvd":[{"id":"EUVD-2019-2254","description":"In Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a method to execute past the end of bytecode array causing crashes. Eclipse OpenJ9 v0.14.0 correctly detects this case and rejects the attempted class load.","status":"published","published":"2019-04-19T13:43:31Z","modified":"2024-08-04T22:17:19Z","updated_at":"2026-11-03T02:40:53.61807Z"}],"ghsa":[{"id":"GHSA-jq73-mhwg-56vq","title":"In Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a...","description":"In Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a method to execute past the end of bytecode array causing crashes. Eclipse OpenJ9 v0.14.0 correctly detects this case and rejects the attempted class load.","status":"published","published":"2022-05-24T16:43:56Z","modified":"2023-01-28T05:05:09Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:44:18.5771Z"}],"nvd":[{"id":"CVE-2019-10245","description":"In Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a method to execute past the end of bytecode array causing crashes. Eclipse OpenJ9 v0.14.0 correctly detects this case and rejects the attempted class load.","status":"published","published":"2019-04-19T14:29:00.227Z","modified":"2026-06-17T02:10:33.963Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20","CWE-119"],"updated_at":"2026-11-02T14:05:11.426883Z"}],"osv":[{"id":"CVE-2019-10245","description":"In Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a method to execute past the end of bytecode array causing crashes. Eclipse OpenJ9 v0.14.0 correctly detects this case and rejects the attempted class load.","status":"published","published":"2019-04-19T14:29:00.227Z","modified":"2026-10-24T10:30:35.614857092Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:10.383287Z"},{"id":"RHSA-2019:1163","title":"Red Hat Security Advisory: java-1.8.0-ibm security update","status":"published","published":"2024-09-13T19:50:30Z","modified":"2026-06-29T10:24:23Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"RHSA-2019:1164","title":"Red Hat Security Advisory: java-1.8.0-ibm security update","status":"published","published":"2024-09-13T19:50:38Z","modified":"2026-06-29T10:24:24Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"RHSA-2019:1165","title":"Red Hat Security Advisory: java-1.7.1-ibm security update","status":"published","published":"2024-09-13T19:51:16Z","modified":"2026-06-29T10:24:24Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"RHSA-2019:1166","title":"Red Hat Security Advisory: java-1.7.1-ibm security update","status":"published","published":"2024-09-13T19:51:23Z","modified":"2026-06-29T10:24:25Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"RHSA-2019:1238","title":"Red Hat Security Advisory: java-1.8.0-ibm security update","status":"published","published":"2024-09-13T19:51:35Z","modified":"2026-10-16T10:01:17Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"RHSA-2019:1325","title":"Red Hat Security Advisory: java-1.8.0-ibm security update","status":"published","published":"2024-09-13T19:51:18Z","modified":"2026-06-29T10:24:59Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"SUSE-SU-2019:1308-1","title":"Security update for java-1_8_0-ibm","description":"This update for java-1_8_0-ibm fixes the following issues:\n\nUpdate to Java 8.0 Service Refresh 5 Fix Pack 35.\n\nSecurity issues fixed:\n\n- CVE-2019-10245: Fixed Java bytecode verifier issue causing crashes (bsc#1134718).\n- CVE-2019-2698: Fixed out of bounds access flaw in the 2D component (bsc#1132729).\n- CVE-2019-2697: Fixed flaw inside the 2D component (bsc#1132734).\n- CVE-2019-2602: Fixed flaw inside BigDecimal implementation (Component: Libraries) (bsc#1132728).\n- CVE-2019-2684: Fixed flaw was found in the RMI registry implementation (bsc#1132732).\n","status":"published","published":"2019-05-21T16:35:27Z","modified":"2026-02-04T04:29:34.867518Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:1308-2","title":"Security update for java-1_8_0-ibm","description":"This update for java-1_8_0-ibm fixes the following issues:\n\nUpdate to Java 8.0 Service Refresh 5 Fix Pack 35.\n\nSecurity issues fixed:\n\n- CVE-2019-10245: Fixed Java bytecode verifier issue causing crashes (bsc#1134718).\n- CVE-2019-2698: Fixed out of bounds access flaw in the 2D component (bsc#1132729).\n- CVE-2019-2697: Fixed flaw inside the 2D component (bsc#1132734).\n- CVE-2019-2602: Fixed flaw inside BigDecimal implementation (Component: Libraries) (bsc#1132728).\n- CVE-2019-2684: Fixed flaw was found in the RMI registry implementation (bsc#1132732).\n","status":"published","published":"2019-06-27T09:41:11Z","modified":"2026-02-04T02:57:14.06414Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:1345-1","title":"Security update for java-1_7_1-ibm","description":"This update for java-1_7_1-ibm fixes the following issues:\n\nUpdate to Java 7.1 Service Refresh 4 Fix Pack 45.\n\nSecurity issues fixed:\n\n- CVE-2019-10245: Fixed Java bytecode verifier issue causing crashes (bsc#1134718).\n- CVE-2019-2698: Fixed out of bounds access flaw in the 2D component (bsc#1132729).\n- CVE-2019-2697: Fixed flaw inside the 2D component (bsc#1132734).\n- CVE-2019-2602: Fixed flaw inside BigDecimal implementation (Component: Libraries) (bsc#1132728).\n- CVE-2019-2684: Fixed flaw was found in the RMI registry implementation (bsc#1132732).\n","status":"published","published":"2019-05-24T12:00:33Z","modified":"2026-02-04T04:24:16.744435Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:14059-1","title":"Security update for java-1_7_1-ibm","description":"This update for java-1_7_1-ibm fixes the following issues:\n\nUpdate to Java 7.1 Service Refresh 4 Fix Pack 45.\n                                                                                     \nSecurity issues fixed:                                                                   \n                                                                        \n- CVE-2019-10245: Fixed Java bytecode verifier issue causing crashes (bsc#1134718).                                              \n- CVE-2019-2698: Fixed out of bounds access flaw in the 2D component (bsc#1132729).                                                                   \n- CVE-2019-2697: Fixed flaw inside the 2D component (bsc#1132734).                                                                   \n- CVE-2019-2602: Fixed flaw inside BigDecimal implementation (Component: Libraries) (bsc#1132728).                                                                                                                 \n- CVE-2019-2684: Fixed flaw was found in the RMI registry implementation (bsc#1132732).                                                                                                                            \n","status":"published","published":"2019-07-23T05:31:21Z","modified":"2025-05-02T04:08:35.007206Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:1644-1","title":"Security update for java-1_8_0-ibm","description":"This update for java-1_8_0-ibm fixes the following issues:\n\nUpdate to Java 8.0 Service Refresh 5 Fix Pack 35.\n\nSecurity issues fixed:\n\n- CVE-2019-10245: Fixed Java bytecode verifier issue causing crashes (bsc#1134718).\n- CVE-2019-2698: Fixed out of bounds access flaw in the 2D component (bsc#1132729).\n- CVE-2019-2697: Fixed flaw inside the 2D component (bsc#1132734).\n- CVE-2019-2602: Fixed flaw inside BigDecimal implementation (Component: Libraries) (bsc#1132728).\n- CVE-2019-2684: Fixed flaw was found in the RMI registry implementation (bsc#1132732).\n","status":"published","published":"2019-06-21T14:10:18Z","modified":"2025-05-02T04:08:35.068111Z","updated_at":"2026-11-02T15:53:46.44301Z"}]}}