CVE-2021-41035

Summary

In Eclipse Openj9 before version 0.29.0, the JVM does not throw IllegalAccessError for MethodHandles that invoke inaccessible interface methods.

Affected Software

Weaknesses

• CWE-250: CWE-250: Execution with Unnecessary Privileges
• CWE-440: CWE-440: Expected Behavior Violation

ADP Enrichment

CVE Program Container

Additional References

• https://gitlab.eclipse.org/eclipsefdn/emo-team/emo/-/issues/104
• https://github.com/eclipse-openj9/openj9/pull/13740
• https://bugs.eclipse.org/bugs/show_bug.cgi?id=576395
• https://security.netapp.com/advisory/ntap-20240621-0006/

References

• https://gitlab.eclipse.org/eclipsefdn/emo-team/emo/-/issues/104
• https://github.com/eclipse-openj9/openj9/pull/13740
• https://bugs.eclipse.org/bugs/show_bug.cgi?id=576395
• https://security.netapp.com/advisory/ntap-20240621-0006/

• ←Previous
• Next→