CVE-2018-12547
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2018-12547
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-12547.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2018-12547
- Related
- Published
- 2019-02-11T15:29:00Z
- Modified
- 2024-09-03T02:04:39.533126Z
- Severity
-
- 9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
In Eclipse OpenJ9, prior to the 0.12.0 release, the jiosnprintf() and jiovsnprintf() native methods ignored the length parameter. This affects existing APIs that called the functions to exceed the allocated buffer. This functions were not directly callable by non-native user code.
- References
-
- https://access.redhat.com/errata/RHSA-2019:0469
- https://access.redhat.com/errata/RHSA-2019:0472
- https://access.redhat.com/errata/RHSA-2019:0473
- https://access.redhat.com/errata/RHSA-2019:0474
- https://access.redhat.com/errata/RHSA-2019:0640
- https://access.redhat.com/errata/RHSA-2019:1238
- https://bugs.eclipse.org/bugs/show_bug.cgi?id=543659