CVE-2021-41041
First published: Wed Apr 27 2022(Updated: )
In Eclipse Openj9 before version 0.32.0, Java 8 & 11 fail to throw the exception captured during bytecode verification when verification is triggered by a MethodHandle invocation, allowing unverified methods to be invoked using MethodHandles.
Credit: emo@eclipse.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Eclipse Openj9 | <0.32.0 | |
| Oracle Java SE | =8 | |
| Oracle Java SE | =11 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2021-41041?
CVE-2021-41041 is a vulnerability in Eclipse Openj9 before version 0.32.0, where Java 8 & 11 fail to throw the exception captured during bytecode verification when verification is triggered by a MethodHandle invocation, allowing unverified methods to be invoked using MethodHandles.
How severe is CVE-2021-41041?
CVE-2021-41041 has a severity rating of 5.3 (medium).
What software is affected by CVE-2021-41041?
Eclipse Openj9 before version 0.32.0, Oracle Java SE version 8, and Oracle Java SE version 11 are all affected by CVE-2021-41041.
How can I mitigate CVE-2021-41041?
To mitigate CVE-2021-41041, update Eclipse Openj9 to version 0.32.0 or later.
Where can I find more information about CVE-2021-41041?
You can find more information about CVE-2021-41041 in the bug report and the pull request on GitHub.
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/type
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/event
- agent/description
- agent/remedy
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/eclipse
- canonical/eclipse openj9
- vendor/oracle
- canonical/oracle java se
- version/oracle java se/8
- version/oracle java se/11