CVE-2023-5676

CVSS 3.1 Score 5.9 of 10 (medium)

Details

Published Nov 15, 2023
Updated: Nov 22, 2023
CWE ID 364
CWE ID 362

Summary

CVE-2023-5676 is a vulnerability found in Eclipse OpenJ9 before version 0.41.0, affecting multiple products. The vulnerability allows an attacker to force the Java Virtual Machine (JVM) into an infinite busy hang or a segmentation fault if a shutdown signal (SIGTERM, SIGINT, or SIGHUP) is received before the JVM finishes initializing. The vulnerability has a risk score of 28 and a base severity of MEDIUM. It has an exploitability score of 2.2 and can be exploited over a network without requiring any privileges or user interaction. The impact of this vulnerability is high, affecting the availability of the affected systems. To remediate this vulnerability, organizations should update their Eclipse OpenJ9 version to 0.41.0 or later.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-5676 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options