Skip to content
fr Sign in
8.7 High

CVE-2026-6918 In Eclipse Open9J versions 0.21 to 0.58, a pre-authentication remote attacker can crash JITServer by sending a 32-byte…

Description

In Eclipse Open9J versions 0.21 to 0.58, a pre-authentication remote attacker can crash JITServer by sending a 32-byte crafted TCP message.

Affected products and versions

Product Affected versions Fixed in
Eclipse OpenJ9 0.21 0.21 → < 0.59 0.59
Red Hat Enterprise Linux Supplementary EUS (v. 10.0) Versions not published
Red Hat Enterprise Linux Supplementary EUS (v.10.2) Versions not published
Red Hat Enterprise Linux Supplementary (v. 10) Versions not published
Red Hat Enterprise Linux 10 Versions not published
Red Hat Enterprise Linux 10.0 Extended Update Support Versions not published
Red Hat Enterprise Linux 10.2 Extended Update Support Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Eclipse OpenJ9

The 7 CVEs of Eclipse OpenJ9 →
CVE-2026-110938 In Eclipse OpenJ9 versions up to 0.63.0, the JITServer component is vulnerable to denial of service due to improper… 8.7 High CVE-2026-111075 In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component fails to perform cross-field validation on… 8.7 High CVE-2026-111074 In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component is vulnerable to a pre-authentication remote… 8.7 High CVE-2026-97400 In Eclipse OpenJ9 versions up to 0.63, opening a supplied diagnostic dump bundle with the jdmpview tool, or equivalent… 6.8 Medium
Track this CVE