CVE-2023-5676

CVSS 3.1 Score 5.9 of 10 (medium)

Details

Published Nov 15, 2023
Updated: Nov 22, 2023
CWE ID 364
CWE ID 362

Summary

CVE-2023-5676 is a vulnerability affecting Eclipse OpenJ9 before version 0.41.0. If a shutdown signal is received before the JVM has completed initialization, it can lead to an infinite busy hang or a segmentation fault. This issue poses a significant risk, as it could cause the JVM to become unresponsive or crash, potentially leading to denial-of-service conditions or data loss. It is essential for users to update to the latest version of OpenJ9 to mitigate this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share