Description
In Eclipse OpenJ9 prior to 0.15, the String.getBytes(int, int, byte[], int) method does not verify that the provided byte array is non-null nor that the provided index is in bounds when compiled by the JIT. This allows arbitrary writes to any 32-bit address or beyond the end of a byte array within Java code run under a SecurityManager.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| The Eclipse Foundation | Eclipse OpenJ9 | unspecified – < 0.15.0 | 0.15.0 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8 | java-1.8.0-ibm +7 | 1:1.8.0.5.40-3.el8_0 | RHSA-2019:2590 |
| RHEL 7 | java-1.8.0-ibm +5 | 1:1.8.0.5.40-1jpp.1.el7 | RHSA-2019:2585 |
| RHEL 6 | java-1.8.0-ibm +5 | 1:1.8.0.5.40-1jpp.1.el6_10 | RHSA-2019:2592 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Network Satellite 5 | java-1.8.0-ibm +1 | 1:1.8.0.5.40-1jpp.1.el6_10 | RHSA-2019:2737 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP1 | java-1_8_0-ibm | 1.8.0_sr5.40-3.24.1 | SUSE-SU-2019:2291-1 |
| SLES 15 | java-1_8_0-ibm | 1.8.0_sr5.40-3.24.1 | SUSE-SU-2019:2291-1 |
| SLES 12 SP5 | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 | SUSE-SU-2019:2371-1 |
| SLES 12 SP4 | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 | SUSE-SU-2019:2371-1 |
| SLES 12 SP3 | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 | SUSE-SU-2019:2371-1 |
Show 13 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP2 | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 | SUSE-SU-2019:2371-1 |
| SLES 12 SP1 | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 | SUSE-SU-2019:2371-1 |
| SLES for SAP 12 SP5 | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 | SUSE-SU-2019:2371-1 |
| SLES for SAP 12 SP4 | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 | SUSE-SU-2019:2371-1 |
| SLES for SAP 12 SP3 | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 | SUSE-SU-2019:2371-1 |
| SLES for SAP 12 SP2 | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 | SUSE-SU-2019:2371-1 |
| SLES for SAP 12 SP1 | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 | SUSE-SU-2019:2371-1 |
| SUSE OpenStack Cloud Crowbar 8 | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 | SUSE-SU-2019:2371-1 |
| SUSE OpenStack Cloud 8 | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 | SUSE-SU-2019:2371-1 |
| SUSE OpenStack Cloud 7 | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 | SUSE-SU-2019:2371-1 |
| SUSE HPE Helion OpenStack 8 | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 | SUSE-SU-2019:2371-1 |
| SUSE Enterprise Storage 5 | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 | SUSE-SU-2019:2371-1 |
| SUSE Enterprise Storage 4 | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 | SUSE-SU-2019:2371-1 |
Advisories 6
- RHSA-2019:2737 Red Hat Security Advisory: java-1.8.0-ibm security update Red Hat Security Advisories (RHSA) · Aug 27, 2026
- RHSA-2019:2592 Red Hat Security Advisory: java-1.8.0-ibm security update Red Hat Security Advisories (RHSA) · Aug 27, 2026
- RHSA-2019:2585 Red Hat Security Advisory: java-1.8.0-ibm security update Red Hat Security Advisories (RHSA) · Aug 27, 2026
- RHSA-2019:2590 Red Hat Security Advisory: java-1.8.0-ibm security update Red Hat Security Advisories (RHSA) · Aug 27, 2026
- SUSE-SU-2019:2291-1 Security update for java-1_8_0-ibm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:2371-1 Security update for java-1_8_0-ibm SUSE / openSUSE Security Updates · Feb 4, 2026
References
- https://bugs.eclipse.org/bugs/show_bug.cgi?id=549075
- RHSA-2019:2585 vendor-advisory
- RHSA-2019:2590 vendor-advisory
- RHSA-2019:2592 vendor-advisory
- RHSA-2019:2737 vendor-advisory