p PatchFirst

CVE-2021-41041

CVE-2021-41041

This page contains facts from public vulnerability sources. Check the original advisory before updating.

In Eclipse Openj9 before version 0.32.0, Java 8 & 11 fail to throw the exception captured during bytecode verification when verification is triggered by a MethodHandle invocation, allowing unverified methods to be invoked using MethodHandles.

CVSS 5.3 · Medium · EPSS 1.1% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • eclipse openj9

    Versions
    • ≥ unspecified, < 0.32.0: Affected (custom)

    Update to 0.32.0

  • eclipse Ubuntu:16.04:LTS

    Versions
    • 3.8.1-8
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • eclipse Ubuntu:18.04:LTS

    Versions
    • 3.8.1-10
    • 3.8.1-11
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →