Read the docs
Red Hat Security Advisory

RHSA-2019:1238

java-1.8.0-ibm security update

Released 2019-05-16 · Red Hat rating Critical · View on Red Hat →

Fixed in

Fixes 10 records

TI-2018-09008 CVE-2018-12549 · GHSA-xpfc-p72p-hwch

Improper input validation in Eclipse OpenJ9

Priority MEDIUM 47

In Eclipse OpenJ9 version 0.11.0, the OpenJ9 JIT compiler may incorrectly omit a null check on the receiver object of an Unsafe call when accelerating it.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02332 Published 2019-02-11 Fixed CWE-111
TI-2018-09006 CVE-2018-12547 · GHSA-5qhh-4q6m-8w7h

Improper input validation in Eclipse OpenJ9

Priority MEDIUM 47

In Eclipse OpenJ9, prior to the 0.12.0 release, the jio_snprintf() and jio_vsnprintf() native methods ignored the length parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02744 Published 2019-02-11 Fixed in 0.12.0 CWE-20
TI-2019-02152 CVE-2019-2602 · GHSA-cq96-vcc6-mj28

Uncontrolled resource consumption in Oracle Java

Priority MEDIUM 46

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0441 Published 2019-04-23 Fixed CWE-400
TI-2019-07560 CVE-2019-10245 · GHSA-jq73-mhwg-56vq

Improper input validation in Eclipse OpenJ9

Priority LOW 38

In Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a method to execute past the end of bytecode array causing crashes.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02492 Published 2019-04-19 Fixed in 0.14.0 CWE-20