Unscored CVE-2018-12548 EUVD-2018-4508GHSA-pjrx-f438-j2f3

In OpenJDK + Eclipse OpenJ9 version 0.11.0 builds, the public jdk.crypto.jniprovider.NativeCrypto class contains public static natives whic…

Published Jan 31, 2019 · Updated Aug 5, 2024 · Assigned by eclipse

Vendor: The Eclipse Foundation Product: Eclipse OpenJ9

Description

In OpenJDK + Eclipse OpenJ9 version 0.11.0 builds, the public jdk.crypto.jniprovider.NativeCrypto class contains public static natives which accept pointer values that are dereferenced in the native code.

Affected products

Vendor	Product	Affected	Fixed
The Eclipse Foundation	Eclipse OpenJ9	0.11.0	—

References

https://bugs.eclipse.org/bugs/show_bug.cgi?id=543792