Описание
In Eclipse Open9J versions 0.21 to 0.58, a pre-authentication remote attacker can crash JITServer by sending a 32-byte crafted TCP message.
Ссылки
- Issue TrackingPatch
- ExploitVendor Advisory
- ExploitVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 0.21.0 (включая) до 0.59.0 (исключая)
cpe:2.3:a:eclipse:openj9:*:*:*:*:*:*:*:*
EPSS
Процентиль: 41%
0.00517
Низкий
7.5 High
CVSS3
Дефекты
CWE-125
CWE-1286
Связанные уязвимости
CVSS3: 7.5
ubuntu
3 месяца назад
In Eclipse Open9J versions 0.21 to 0.58, a pre-authentication remote attacker can crash JITServer by sending a 32-byte crafted TCP message.
CVSS3: 7.5
redhat
3 месяца назад
In Eclipse Open9J versions 0.21 to 0.58, a pre-authentication remote attacker can crash JITServer by sending a 32-byte crafted TCP message.
EPSS
Процентиль: 41%
0.00517
Низкий
7.5 High
CVSS3
Дефекты
CWE-125
CWE-1286