CVE:CVE-2021-28167
CNNVD:CNNVD-202104-1600
Eclipse OpenJ9是Eclipse基金会的一款Java应用程序引擎。该产品主要用于运行Java应用程序。
Eclipse Openj9 0.25版本存在安全漏洞，该漏洞源于jdk.internal.reflect.ConstantPool API会导致JVM在某些情况下预先解析某些常量池项。这允许用户在不运行类初始化方法的情况下调用静态方法或访问静态成员，并允许用户观察未初始化的值。
solution:Upgrade eclipse openj9 to a higher version than 0.25.0,and avoid the version (,0.25.0]
solution:Upgrade entrouvert lasso to a higher version than 2.7.0,and avoid the version (,2.7.0); Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade fedoraproject fedora to a higher version than 33,34,and avoid the version 33,34