In OpenJDK + Eclipse OpenJ9 version 0.11.0 builds, the public jdk.crypto.jniprovider.NativeCrypto class contains public static natives which accept pointer values that are dereferenced in the native code.
References
Link | Resource |
---|---|
https://bugs.eclipse.org/bugs/show_bug.cgi?id=543792 | Issue Tracking Vendor Advisory |
Configurations
Information
Published : 2019-01-31 12:29
Updated : 2019-10-09 16:34
NVD link : CVE-2018-12548
Mitre link : CVE-2018-12548
JSON object : View
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
Products Affected
eclipse
- openj9