CVE-2023-2597

Katalog CVE

CVSS 9.1 · Critical EPSS 0,43%

Kerentanan Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') pada eclipse openj9. Skor CVSS 3.1 9.1 (Critical) menurut NVD.

Deskripsi (NVD)

In Eclipse Openj9 before version 0.38.0, in the implementation of the shared cache (which is enabled by default in OpenJ9 builds) the size of a string is not properly checked against the size of the buffer.

Rincian

Terbit di NVD

22 Mei 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.1 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CWE-125: Out-of-bounds Read

EPSS (30 hari)

0,43% peluang dieksploitasi; lebih tinggi dari 35,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/eclipse-openj9/openj9/pull/17259 patch
• https://security.netapp.com/advisory/ntap-20240621-0006/