Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-2597

In Eclipse Openj9 before version 0.38.0, in the implementation of the shared cache (which is enabled by default in OpenJ9 builds) the size of a string is not properly checked against the size of the buffer.

Published

2023-05-22T12:15:09.760

Last Modified

2024-11-21T07:58:54.127

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.0 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-120
  • Type: Primary
    CWE-125
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application eclipse openj9 < 0.38.0 Yes
References