CVE-2023-5676CWE-364
Eclipse OpenJ9 possible infinite busy hang
Medium · published November 15, 2023
What it is
In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang on a spinlock or a segmentation fault if a shutdown signal (SIGTERM, SIGINT or SIGHUP) is received before the JVM has finished initializing.
The record
Technical detail
- CVSS v3.1
- 4.1 · MEDIUM
- Vector
- CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00410 · 34.1th percentile
- Weakness
- CWE-364 · Signal Handler Race Condition
- Published
- 2023-11-15T14:02Z
EPSS history
Timeline