Input validation error in OpenJ9 - CVE-2018-12549

Vulnerability identifier: #VU77338

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-12549

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the system.

The vulnerability exists due to the OpenJ9 JIT compiler may incorrectly omit a null check on the receiver object of an Unsafe call when accelerating it. A remote attacker can pass specially crafted input to the application and execute arbitrary code on the system.

OpenJ9
IBM Cloud Transformation Advisor
Red Hat Satellite
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, little endian
java-1.8.0-ibm (Red Hat package)
java-1.8.0-ibm-demo (Red Hat package)
java-1.8.0-ibm-devel (Red Hat package)
java-1.8.0-ibm-jdbc (Red Hat package)
java-1.8.0-ibm-plugin (Red Hat package)
java-1.8.0-ibm-src (Red Hat package)

Install updates from vendor's website.

IBM Cloud Transformation Advisor - update to 1.9.8
java-1.8.0-ibm (Red Hat package) - addressed in versions 1.8.0.5.30-1jpp.1.el6_10, 1.8.0.5.30-1jpp.1.el7
java-1.8.0-ibm-demo (Red Hat package) - addressed in versions 1.8.0.5.30-1jpp.1.el6_10, 1.8.0.5.30-1jpp.1.el7
java-1.8.0-ibm-devel (Red Hat package) - addressed in versions 1.8.0.5.30-1jpp.1.el6_10, 1.8.0.5.30-1jpp.1.el7
java-1.8.0-ibm-jdbc (Red Hat package) - addressed in versions 1.8.0.5.30-1jpp.1.el6_10, 1.8.0.5.30-1jpp.1.el7
java-1.8.0-ibm-plugin (Red Hat package) - addressed in versions 1.8.0.5.30-1jpp.1.el6_10, 1.8.0.5.30-1jpp.1.el7
java-1.8.0-ibm-src (Red Hat package) - addressed in versions 1.8.0.5.30-1jpp.1.el6_10, 1.8.0.5.30-1jpp.1.el7

• https://access.redhat.com/errata/RHSA-2019:0469
• https://access.redhat.com/errata/RHSA-2019:0472
• https://access.redhat.com/errata/RHSA-2019:0640
• https://access.redhat.com/errata/RHSA-2019:1238
• https://bugs.eclipse.org/bugs/show_bug.cgi?id=544019

• Multiple vulnerabilities in IBM Cloud Transformation Advisor
• Red Hat Enterprise Linux 7 Supplementary update for java-1.8.0-ibm
• Red Hat Enterprise Linux 6 Supplementary update for java-1.8.0-ibm
• Red Hat Satellite 5 update for java-1.8.0-ibm