Read the docs
TI-2019-13164 Aliases CVE-2019-17639GHSA-rm33-h23j-qcgg

Type confusion in Eclipse OpenJ9

Priority LOW 27CWE-843Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Low · None · None
Fix status
Partial Red Hat: 9 fixed, 1 without a fix

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat.

Summary

In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the source or destination array can, in certain specially crafted code patterns, cause the current method to return prematurely with an undefined return value. This allows whatever value happens to be in the return register at that time to be used as if it matches the method's declared return type.

Why it matters now

EPSS 0.01504 74th percentileScored 2026-11-07
Fix Partial Red Hat: 4 advisoriesRed Hat: 9 fixed, 1 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
Eclipse FoundationEclipse OpenJ9up to 0.21—No fix listedCNA
  • Eclipse OpenJ9 VendorEclipse Foundation Affected up to 0.21 Fixed in — No fix listed CNA

CPE configurations NVD · 4

CPEVersionsRoleVendor
cpe:2.3:a:eclipse:openj9:*:*:*:*:*:*:*:*up to 0.20.0VulnerableEclipse Foundation
cpe:2.3:a:eclipse:openj9:0.21.0:-:*:*:*:*:*:*0.21.0VulnerableEclipse Foundation
cpe:2.3:a:eclipse:openj9:0.21.0:milestone1:*:*:*:*:*:*0.21.0 milestone1VulnerableEclipse Foundation
cpe:2.3:a:eclipse:openj9:0.21.0:milestone2:*:*:*:*:*:*0.21.0 milestone2VulnerableEclipse Foundation
  • cpe:2.3:a:eclipse:openj9:*:*:*:*:*:*:*:* Versions up to 0.20.0 Vulnerable ·Eclipse Foundation
  • cpe:2.3:a:eclipse:openj9:0.21.0:-:*:*:*:*:*:* Versions 0.21.0 Vulnerable ·Eclipse Foundation
  • cpe:2.3:a:eclipse:openj9:0.21.0:milestone1:*:*:*:*:*:* Versions 0.21.0 milestone1 Vulnerable ·Eclipse Foundation
  • cpe:2.3:a:eclipse:openj9:0.21.0:milestone2:*:*:*:*:*:* Versions 0.21.0 milestone2 Vulnerable ·Eclipse Foundation

Remediation

Red Hat 4 advisories

  • RHSA-2020:5585 Released 2020-12-16 · Red Hat rating Important
    java-1.8.0-ibm security update
    • Red Hat Enterprise Linux Client Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.6.20-1jpp.1.el7, java-1.8.0-ibm-demo-1:1.8.0.6.20-1jpp.1.el7, java-1.8.0-ibm-devel-1:1.8.0.6.20-1jpp.1.el7 +3
    • Red Hat Enterprise Linux ComputeNode Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.6.20-1jpp.1.el7, java-1.8.0-ibm-demo-1:1.8.0.6.20-1jpp.1.el7, java-1.8.0-ibm-devel-1:1.8.0.6.20-1jpp.1.el7 +1
    • Red Hat Enterprise Linux Server Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.6.20-1jpp.1.el7, java-1.8.0-ibm-demo-1:1.8.0.6.20-1jpp.1.el7, java-1.8.0-ibm-devel-1:1.8.0.6.20-1jpp.1.el7 +3
    • Red Hat Enterprise Linux Workstation Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.6.20-1jpp.1.el7, java-1.8.0-ibm-demo-1:1.8.0.6.20-1jpp.1.el7, java-1.8.0-ibm-devel-1:1.8.0.6.20-1jpp.1.el7 +3
  • RHSA-2020:3387 Released 2020-08-10 · Red Hat rating Important
    java-1.7.1-ibm security update
    • Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10, java-1.7.1-ibm-demo-1:1.7.1.4.70-1jpp.1.el6_10, java-1.7.1-ibm-devel-1:1.7.1.4.70-1jpp.1.el6_10 +3
    • Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10, java-1.7.1-ibm-demo-1:1.7.1.4.70-1jpp.1.el6_10, java-1.7.1-ibm-devel-1:1.7.1.4.70-1jpp.1.el6_10 +1
    • Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10, java-1.7.1-ibm-demo-1:1.7.1.4.70-1jpp.1.el6_10, java-1.7.1-ibm-devel-1:1.7.1.4.70-1jpp.1.el6_10 +3
    • Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10, java-1.7.1-ibm-demo-1:1.7.1.4.70-1jpp.1.el6_10, java-1.7.1-ibm-devel-1:1.7.1.4.70-1jpp.1.el6_10 +3
  • RHSA-2020:3388 Released 2020-08-10 · Red Hat rating Important
    java-1.7.1-ibm security update
    • Red Hat Enterprise Linux Client Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7, java-1.7.1-ibm-demo-1:1.7.1.4.70-1jpp.1.el7, java-1.7.1-ibm-devel-1:1.7.1.4.70-1jpp.1.el7 +3
    • Red Hat Enterprise Linux ComputeNode Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7, java-1.7.1-ibm-demo-1:1.7.1.4.70-1jpp.1.el7, java-1.7.1-ibm-devel-1:1.7.1.4.70-1jpp.1.el7 +1
    • Red Hat Enterprise Linux Server Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7, java-1.7.1-ibm-demo-1:1.7.1.4.70-1jpp.1.el7, java-1.7.1-ibm-devel-1:1.7.1.4.70-1jpp.1.el7 +3
    • Red Hat Enterprise Linux Workstation Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7, java-1.7.1-ibm-demo-1:1.7.1.4.70-1jpp.1.el7, java-1.7.1-ibm-devel-1:1.7.1.4.70-1jpp.1.el7 +3
Show 1 more Red Hat advisories
  • RHSA-2020:3386 Released 2020-08-10 · Red Hat rating Important
    java-1.8.0-ibm security update
    • Red Hat Enterprise Linux 8 Supplementary java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2, java-1.8.0-ibm-demo-1:1.8.0.6.15-1.el8_2, java-1.8.0-ibm-devel-1:1.8.0.6.15-1.el8_2 +5

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 6AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux 8 SupplementaryFixed RHSA-2020:3386
Red Hat Enterprise Linux Client Supplementary (v. 7)Fixed RHSA-2020:3388, RHSA-2020:5585
Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)Fixed RHSA-2020:3388, RHSA-2020:5585
Red Hat Enterprise Linux Desktop Supplementary (v. 6)Fixed RHSA-2020:3387
Red Hat Enterprise Linux HPC Node Supplementary (v. 6)Fixed RHSA-2020:3387
Red Hat Enterprise Linux Server Supplementary (v. 6)Fixed RHSA-2020:3387
Red Hat Enterprise Linux Server Supplementary (v. 7)Fixed RHSA-2020:3388, RHSA-2020:5585
Red Hat Enterprise Linux Workstation Supplementary (v. 6)Fixed RHSA-2020:3387
Red Hat Enterprise Linux Workstation Supplementary (v. 7)Fixed RHSA-2020:3388, RHSA-2020:5585

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-17639
  2. 2026-10-03 Alias added: GHSA-rm33-h23j-qcgg

References

Advisory 1

  • TI-2026-06062 Out-of-bounds read in Eclipse OpenJ9 CVSS 4.0HIGH 8.7
  • TI-2021-09396 Missing initialization of resource in Eclipse OpenJ9 CVSS 3.1MEDIUM 6.5
  • TI-2018-09008 Improper input validation in Eclipse OpenJ9 CVSS 3.0CRITICAL 9.8
  • TI-2018-09006 Improper input validation in Eclipse OpenJ9 CVSS 3.0CRITICAL 9.8
  • TI-2021-17899 In Eclipse Openj9 before version 0.29.0, the JVM does not throw IllegalAccessError for… CVSS 3.1CRITICAL 9.8
  • TI-2019-08829 Out-of-bounds write in Eclipse OpenJ9 CVSS 3.0CRITICAL 9.8
See all 22 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences