Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-5676

In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang on a spinlock or a segmentation fault if a shutdown signal (SIGTERM, SIGINT or SIGHUP) is received before the JVM has finished initializing.

Published

2023-11-15T14:15:07.683

Last Modified

2024-11-21T08:42:15.140

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 4.1 (MEDIUM)

Weaknesses

Type: Secondary
CWE-364
Type: Primary
CWE-362

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	eclipse	openj9	< 0.41.0	Yes

References

https://github.com/eclipse-openj9/openj9/pull/18085 Issue Tracking, Patch ([email protected])
https://gitlab.eclipse.org/security/cve-assignement/-/issues/13 Vendor Advisory ([email protected])
https://github.com/eclipse-openj9/openj9/pull/18085 Issue Tracking, Patch (af854a3a-2127-422b-91ae-364da2661108)
https://gitlab.eclipse.org/security/cve-assignement/-/issues/13 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)