Skip to content
Fencer Vulns
high 7.4

CVE-2019-11775 json

All builds of Eclipse OpenJ9 prior to 0.15 contain a bug where the loop versioner may fail to privatize a value that is pulled out of the l…

published 2019-07-30 7 y ago modified 2026-06-17 4 mo ago also EUVD-2019-3443

cvss
7.4
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
1.5%
EPSS 1.5% chance of exploitation in 30 days, percentile 73%
public exploits
0
none known

Summary

All builds of Eclipse OpenJ9 prior to 0.15 contain a bug where the loop versioner may fail to privatize a value that is pulled out of the loop by versioning - for example if there is a condition that is moved out of the loop that reads a field we may not privatize the value of that field in the modified copy of the loop allowing the test to see one value of the field and subsequently the loop to see a modified field value without retesting the condition moved out of the loop. This can lead to a variety of different issues but read out of array bounds is one major consequence of these problems.

Patch / fix

  • The Eclipse Foundation Eclipse OpenJ9 0.15.0
  • java-1.7.1-ibm RHEL 6 EXTRAS 1:1.7.1.4.50-1jpp.1.el6_10
  • java-1.7.1-ibm-src RHEL 6 EXTRAS 1:1.7.1.4.50-1jpp.1.el6_10
  • java-1.7.1-ibm-demo RHEL 6 EXTRAS 1:1.7.1.4.50-1jpp.1.el6_10
  • java-1.7.1-ibm-jdbc RHEL 6 EXTRAS 1:1.7.1.4.50-1jpp.1.el6_10
  • java-1.7.1-ibm-plugin RHEL 6 EXTRAS 1:1.7.1.4.50-1jpp.1.el6_10
  • java-1.7.1-ibm RHEL 7 EXTRAS 1:1.7.1.4.50-1jpp.1.el7
  • java-1.7.1-ibm-src RHEL 7 EXTRAS 1:1.7.1.4.50-1jpp.1.el7
  • java-1.7.1-ibm-demo RHEL 7 EXTRAS 1:1.7.1.4.50-1jpp.1.el7

red hat advisories RHSA-2019:2494RHSA-2019:2495RHSA-2019:2590RHSA-2019:2585RHSA-2019:2737RHSA-2019:2592

  • java-1_7_0-ibm SLE Point of Sale 11 SP3 1.7.0_sr10.50-65.42.1
  • java-1_8_0-ibm SLES for SAP 12 SP5, SLES for SAP 12 SP4, SLES for SAP 12 SP3 +17 more 1.8.0_sr5.40-30.54.1
  • java-1_7_1-ibm SLES for SAP 12 SP5, SLES for SAP 12 SP4, SLES for SAP 12 SP3 +17 more 1.7.1_sr4.50-38.41.1
  • java-1_8_0-ibm SLE Module for Legacy 15 SP1, SLE Module for Legacy 15 1.8.0_sr5.40-3.24.1
  • java-1_7_1-ibm SLES 11 SP4-LTSS 1.7.1_sr4.50-26.44.1

suse advisories SUSE-SU-2019:14188-1SUSE-SU-2019:2371-1SUSE-SU-2019:2336-1SUSE-SU-2019:2291-1SUSE-SU-2019:14160-1

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2019-11775 updated cvss 7.4

JDK: Failure to privatize a value pulled out of the loop by versioning

  • Red Hat Enterprise Linux 8 Supplementary java-1.8.0-ibm 1.8.0.5.40-3.el8_0, java-1.8.0-ibm-src 1.8.0.5.40-3.el8_0, java-1.8.0-ibm-demo 1.8.0.5.40-3.el8_0, java-1.8.0-ibm-jdbc 1.8.0.5.40-3.el8_0, java-1.8.0-ibm-plugin 1.8.0.5.40-3.el8_0, java-1.8.0-ibm-headless 1.8.0.5.40-3.el8_0, +1 more
    fixed: vendor fix RHSA-2019:2590
  • Red Hat Enterprise Linux Client Supplementary (v. 7) java-1.7.1-ibm 1.7.1.4.50-1jpp.1.el7, java-1.8.0-ibm 1.8.0.5.40-1jpp.1.el7, java-1.7.1-ibm-src 1.7.1.4.50-1jpp.1.el7, java-1.8.0-ibm-src 1.8.0.5.40-1jpp.1.el7, java-1.7.1-ibm-demo 1.7.1.4.50-1jpp.1.el7, java-1.7.1-ibm-jdbc 1.7.1.4.50-1jpp.1.el7, +4 more Red Hat Enterprise Linux ComputeNode Supplementary (v. 7) java-1.7.1-ibm 1.7.1.4.50-1jpp.1.el7, java-1.8.0-ibm 1.8.0.5.40-1jpp.1.el7, java-1.7.1-ibm-src 1.7.1.4.50-1jpp.1.el7, java-1.8.0-ibm-src 1.8.0.5.40-1jpp.1.el7, java-1.7.1-ibm-demo 1.7.1.4.50-1jpp.1.el7, java-1.8.0-ibm-demo 1.8.0.5.40-1jpp.1.el7
    fixed: vendor fix RHSA-2019:2495
  • Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.7.1-ibm 1.7.1.4.50-1jpp.1.el6_10, java-1.8.0-ibm 1.8.0.5.40-1jpp.1.el6_10, java-1.7.1-ibm-src 1.7.1.4.50-1jpp.1.el6_10, java-1.8.0-ibm-src 1.8.0.5.40-1jpp.1.el6_10, java-1.7.1-ibm-demo 1.7.1.4.50-1jpp.1.el6_10, java-1.7.1-ibm-jdbc 1.7.1.4.50-1jpp.1.el6_10, +4 more Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.7.1-ibm 1.7.1.4.50-1jpp.1.el6_10, java-1.8.0-ibm 1.8.0.5.40-1jpp.1.el6_10, java-1.7.1-ibm-src 1.7.1.4.50-1jpp.1.el6_10, java-1.8.0-ibm-src 1.8.0.5.40-1jpp.1.el6_10, java-1.7.1-ibm-demo 1.7.1.4.50-1jpp.1.el6_10, java-1.8.0-ibm-demo 1.8.0.5.40-1jpp.1.el6_10 Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.7.1-ibm 1.7.1.4.50-1jpp.1.el6_10, java-1.8.0-ibm 1.8.0.5.40-1jpp.1.el6_10, java-1.7.1-ibm-src 1.7.1.4.50-1jpp.1.el6_10, java-1.8.0-ibm-src 1.8.0.5.40-1jpp.1.el6_10, java-1.7.1-ibm-demo 1.7.1.4.50-1jpp.1.el6_10, java-1.7.1-ibm-jdbc 1.7.1.4.50-1jpp.1.el6_10, +4 more
    fixed: vendor fix RHSA-2019:2494
  • Red Hat Enterprise Linux Server Supplementary (v. 7) java-1.7.1-ibm 1.7.1.4.50-1jpp.1.el7, java-1.8.0-ibm 1.8.0.5.40-1jpp.1.el7, java-1.7.1-ibm-src 1.7.1.4.50-1jpp.1.el7, java-1.8.0-ibm-src 1.8.0.5.40-1jpp.1.el7, java-1.7.1-ibm-demo 1.7.1.4.50-1jpp.1.el7, java-1.7.1-ibm-jdbc 1.7.1.4.50-1jpp.1.el7, +4 more
    fixed: vendor fix RHSA-2019:2495
  • Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.7.1-ibm 1.7.1.4.50-1jpp.1.el6_10, java-1.8.0-ibm 1.8.0.5.40-1jpp.1.el6_10, java-1.7.1-ibm-src 1.7.1.4.50-1jpp.1.el6_10, java-1.8.0-ibm-src 1.8.0.5.40-1jpp.1.el6_10, java-1.7.1-ibm-demo 1.7.1.4.50-1jpp.1.el6_10, java-1.7.1-ibm-jdbc 1.7.1.4.50-1jpp.1.el6_10, +4 more
    fixed: vendor fix RHSA-2019:2494
  • Red Hat Enterprise Linux Workstation Supplementary (v. 7) java-1.7.1-ibm 1.7.1.4.50-1jpp.1.el7, java-1.8.0-ibm 1.8.0.5.40-1jpp.1.el7, java-1.7.1-ibm-src 1.7.1.4.50-1jpp.1.el7, java-1.8.0-ibm-src 1.8.0.5.40-1jpp.1.el7, java-1.7.1-ibm-demo 1.7.1.4.50-1jpp.1.el7, java-1.7.1-ibm-jdbc 1.7.1.4.50-1jpp.1.el7, +4 more
    fixed: vendor fix RHSA-2019:2495
  • Red Hat Satellite 5.8 (RHEL v.6) java-1.8.0-ibm 1.8.0.5.40-1jpp.1.el6_10
    fixed: vendor fix RHSA-2019:2737

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

1.47% chance of exploitation in the next 30 days, higher than 73% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
NVD 3.1 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H
NVD 2.0 5.8 AV:N/AC:M/Au:N/C:P/I:N/A:P

Affected products

  • The Eclipse Foundation Eclipse OpenJ9

Classification

Weakness
  • CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.