VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Feb 11, 2019· Updated Jun 17, 2026

CVE-2018-12547

CVE-2018-12547

Description

In Eclipse OpenJ9, prior to the 0.12.0 release, the jio_snprintf() and jio_vsnprintf() native methods ignored the length parameter. This affects existing APIs that called the functions to exceed the allocated buffer. This functions were not directly callable by non-native user code.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10
  • Eclipse/Openj92 versions
    cpe:2.3:a:eclipse:openj9:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:eclipse:openj9:*:*:*:*:*:*:*:*range: <0.12.0
    • (no CPE)range: <0.12.0
  • Red Hat/Satellite
    cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*
  • Red Hat/Enterprise Linux Desktop2 versions
    cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
  • Red Hat/Enterprise Linux Server2 versions
    cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
  • Red Hat/Enterprise Linux Workstation2 versions
    cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
  • The Eclipse Foundation/Eclipse OpenJ9v5
    Range: unspecified

Patches

Vulnerability mechanics

References

7

News mentions

0

No linked articles in our index yet.