VULNERABILITY INTELLIGENCE

CVE-2023-5676

CVSS score4.1 MEDIUM
EPSS probability0.41%
CISA KEVNot currently listed
Published2023-11-15
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

Description

In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang on a spinlock or a segmentation fault if a shutdown signal (SIGTERM, SIGINT or SIGHUP) is received before the JVM has finished initializing.

Weakness classification

  • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
  • CWE-364: Signal Handler Race Condition

Primary references