Description
In Eclipse OpenJ9 up to and including version 0.23, there is potential for a stack-based buffer overflow when the virtual machine or JNI natives are converting from UTF-8 characters to platform encoding.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| The Eclipse Foundation | Eclipse OpenJ9 | unspecified – ≤ 0.23 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8 | java-1.8.0-ibm +7 | 1:1.8.0.6.25-2.el8_3 | RHSA-2021:0736 |
| RHEL 7 | java-1.7.1-ibm +5 | 1:1.7.1.4.80-1jpp.1.el7 | RHSA-2021:0733 |
| RHEL 7 | java-1.8.0-ibm +5 | 1:1.8.0.6.25-1jpp.1.el7 | RHSA-2021:0717 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP2 | java-1_8_0-ibm | 1.8.0_sr6.25-3.50.1 | SUSE-SU-2021:0670-1 |
| SLES 15 SP1 | java-1_8_0-ibm | 1.8.0_sr6.25-3.50.1 | SUSE-SU-2021:0670-1 |
| SLES 15 | java-1_8_0-ibm | 1.8.0_sr6.25-3.50.1 | SUSE-SU-2021:0670-1 |
| SLES 12 SP5 | java-1_7_1-ibm | 1.7.1_sr4.80-38.62.1 | SUSE-SU-2021:0512-1 |
| SLES 12 SP5 | java-1_8_0-ibm | 1.8.0_sr6.25-30.81.1 | SUSE-SU-2021:0652-1 |
| SLES 12 SP4 | java-1_7_1-ibm | 1.7.1_sr4.80-38.62.1 | SUSE-SU-2021:0512-1 |
| SLES 12 SP4 | java-1_8_0-ibm | 1.8.0_sr6.25-30.81.1 | SUSE-SU-2021:0652-1 |
Show 20 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP3 | java-1_7_1-ibm | 1.7.1_sr4.80-38.62.1 | SUSE-SU-2021:0512-1 |
| SLES 12 SP3 | java-1_8_0-ibm | 1.8.0_sr6.25-30.81.1 | SUSE-SU-2021:0652-1 |
| SLES 12 SP2 | java-1_7_1-ibm | 1.7.1_sr4.80-38.62.1 | SUSE-SU-2021:0512-1 |
| SLES 12 SP2 | java-1_8_0-ibm | 1.8.0_sr6.25-30.81.1 | SUSE-SU-2021:0652-1 |
| SLES 11 SP4 | java-1_7_1-ibm | 1.7.1_sr4.80-26.65.1 | SUSE-SU-2021:14634-1 |
| SLES for SAP 15 SP1 | java-1_8_0-ibm | 1.8.0_sr6.25-3.50.1 | SUSE-SU-2021:0670-1 |
| SLES for SAP 15 | java-1_8_0-ibm | 1.8.0_sr6.25-3.50.1 | SUSE-SU-2021:0670-1 |
| SLES for SAP 12 SP5 | java-1_7_1-ibm | 1.7.1_sr4.80-38.62.1 | SUSE-SU-2021:0512-1 |
| SLES for SAP 12 SP5 | java-1_8_0-ibm | 1.8.0_sr6.25-30.81.1 | SUSE-SU-2021:0652-1 |
| SLES for SAP 12 SP4 | java-1_7_1-ibm | 1.7.1_sr4.80-38.62.1 | SUSE-SU-2021:0512-1 |
| SLES for SAP 12 SP4 | java-1_8_0-ibm | 1.8.0_sr6.25-30.81.1 | SUSE-SU-2021:0652-1 |
| SLES for SAP 12 SP3 | java-1_7_1-ibm | 1.7.1_sr4.80-38.62.1 | SUSE-SU-2021:0512-1 |
| SLES for SAP 12 SP3 | java-1_8_0-ibm | 1.8.0_sr6.25-30.81.1 | SUSE-SU-2021:0652-1 |
| SLES for SAP 12 SP2 | java-1_7_1-ibm | 1.7.1_sr4.80-38.62.1 | SUSE-SU-2021:0512-1 |
| SLES for SAP 12 SP2 | java-1_8_0-ibm | 1.8.0_sr6.25-30.81.1 | SUSE-SU-2021:0652-1 |
| SUSE OpenStack Cloud Crowbar 9 | java-1_7_1-ibm | 1.7.1_sr4.80-38.62.1 | SUSE-SU-2021:0512-1 |
| SUSE OpenStack Cloud Crowbar 9 | java-1_8_0-ibm | 1.8.0_sr6.25-30.81.1 | SUSE-SU-2021:0652-1 |
| SUSE OpenStack Cloud Crowbar 8 | java-1_7_1-ibm | 1.7.1_sr4.80-38.62.1 | SUSE-SU-2021:0512-1 |
| SUSE OpenStack Cloud Crowbar 8 | java-1_8_0-ibm | 1.8.0_sr6.25-30.81.1 | SUSE-SU-2021:0652-1 |
| SUSE OpenStack Cloud 9 | java-1_7_1-ibm | 1.7.1_sr4.80-38.62.1 | SUSE-SU-2021:0512-1 |
| SUSE OpenStack Cloud 9 | java-1_8_0-ibm | 1.8.0_sr6.25-30.81.1 | SUSE-SU-2021:0652-1 |
| SUSE OpenStack Cloud 8 | java-1_7_1-ibm | 1.7.1_sr4.80-38.62.1 | SUSE-SU-2021:0512-1 |
| SUSE OpenStack Cloud 8 | java-1_8_0-ibm | 1.8.0_sr6.25-30.81.1 | SUSE-SU-2021:0652-1 |
| SUSE OpenStack Cloud 7 | java-1_7_1-ibm | 1.7.1_sr4.80-38.62.1 | SUSE-SU-2021:0512-1 |
| SUSE OpenStack Cloud 7 | java-1_8_0-ibm | 1.8.0_sr6.25-30.81.1 | SUSE-SU-2021:0652-1 |
| SUSE Manager Server 4.0 | java-1_8_0-ibm | 1.8.0_sr6.25-3.50.1 | SUSE-SU-2021:0670-1 |
| SUSE Manager Retail Branch Server 4.0 | java-1_8_0-ibm | 1.8.0_sr6.25-3.50.1 | SUSE-SU-2021:0670-1 |
| SUSE Manager Proxy 4.0 | java-1_8_0-ibm | 1.8.0_sr6.25-3.50.1 | SUSE-SU-2021:0670-1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | java-1_7_0-ibm | 1.7.0_sr10.80-65.60.1 | SUSE-SU-2021:14640-1 |
| SUSE HPE Helion OpenStack 8 | java-1_7_1-ibm | 1.7.1_sr4.80-38.62.1 | SUSE-SU-2021:0512-1 |
| SUSE HPE Helion OpenStack 8 | java-1_8_0-ibm | 1.8.0_sr6.25-30.81.1 | SUSE-SU-2021:0652-1 |
| SUSE Enterprise Storage 6 | java-1_8_0-ibm | 1.8.0_sr6.25-3.50.1 | SUSE-SU-2021:0670-1 |
Advisories 9
- RHSA-2021:0736 Red Hat Security Advisory: java-1.8.0-ibm security update Red Hat Security Advisories (RHSA) · Aug 27, 2026
- RHSA-2021:0717 Red Hat Security Advisory: java-1.8.0-ibm security update Red Hat Security Advisories (RHSA) · Aug 27, 2026
- RHSA-2021:0733 Red Hat Security Advisory: java-1.7.1-ibm security update Red Hat Security Advisories (RHSA) · Aug 27, 2026
- SUSE-SU-2021:14634-1 Security update for java-1_7_1-ibm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2021:0512-1 Security update for java-1_7_1-ibm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2021:0652-1 Security update for java-1_8_0-ibm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2021:14640-1 Security update for java-1_7_0-ibm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2021:0670-1 Security update for java-1_8_0-ibm SUSE / openSUSE Security Updates · May 2, 2025
- WID-SEC-2023-0016 IBM Tivoli Monitoring: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 3, 2023