CVE-2019-17639
JDK: Information disclosure via calls to System.arraycopy() with invalid length
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the source or destination array can, in certain specially crafted code patterns, cause the current method to return prematurely with an undefined return value. This allows whatever value happens to be in the return register at that time to be used as if it matches the method's declared return type.
En Eclipse OpenJ9 anterior a la versión 0.21 en plataformas Power, llamar al método System.arraycopy con una longitud mayor que la longitud de la matriz de origen o destino puede, en determinados patrones de código especialmente diseñados, hacer que el método actual regrese prematuramente con un valor de retorno indefinido. Esto permite que cualquier valor que esté en el registro de retorno en ese momento sea usado como si coincide con el tipo de retorno declarado del método
CVSS Scores
SSVC
- Decision:-
Timeline
- 2019-10-16 CVE Reserved
- 2020-07-15 CVE Published
- 2023-03-31 EPSS Updated
- 2024-08-05 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
- CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')
CAPEC
References (3)
URL | Tag | Source |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
https://bugs.eclipse.org/bugs/show_bug.cgi?id=563998 | 2020-08-12 | |
https://access.redhat.com/security/cve/CVE-2019-17639 | 2020-12-16 | |
https://bugzilla.redhat.com/show_bug.cgi?id=1866497 | 2020-12-16 |
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Eclipse Search vendor "Eclipse" | Openj9 Search vendor "Eclipse" for product "Openj9" | <= 0.20.0 Search vendor "Eclipse" for product "Openj9" and version " <= 0.20.0" | - |
Affected
| ||||||
Eclipse Search vendor "Eclipse" | Openj9 Search vendor "Eclipse" for product "Openj9" | 0.21.0 Search vendor "Eclipse" for product "Openj9" and version "0.21.0" | - |
Affected
| ||||||
Eclipse Search vendor "Eclipse" | Openj9 Search vendor "Eclipse" for product "Openj9" | 0.21.0 Search vendor "Eclipse" for product "Openj9" and version "0.21.0" | milestone1 |
Affected
| ||||||
Eclipse Search vendor "Eclipse" | Openj9 Search vendor "Eclipse" for product "Openj9" | 0.21.0 Search vendor "Eclipse" for product "Openj9" and version "0.21.0" | milestone2 |
Affected
|