[Bug 1204703] VUL-0: CVE-2022-3676: In Eclipse Openj9 before version 0.35.0, interface calls can be inlined without a runtime type check. Malicious bytecode could make use of this inlining to access or modify memory via an incompatible type.

10 Nov 2022

      https://bugzilla.suse.com/show_bug.cgi?id=1204703

SMASH SMASH <smash_bz@suse.de> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Whiteboard|                            |CVSSv3.1:SUSE:CVE-2022-3676
                   |                            |:6.5:(AV:N/AC:L/PR:N/UI:N/S
                   |                            |:U/C:L/I:L/A:N)

-- 
You are receiving this mail because:
You are on the CC list for the bug.

bugzilla_noreply＠suse.com

tags

participants (1)