Back to Database
Status published
Medium
CVE-2023-5676
Eclipse OpenJ9 possible infinite busy hang
Vulnerability Description
In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang on a spinlock or a segmentation fault if a shutdown signal (SIGTERM, SIGINT or SIGHUP) is received before the JVM has finished initializing.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-5676
Credits & Attribution
No credits recorded in the NVD database.
References
More from Eclipse Foundation
View All →CVE-2025-7962
In Jakarta Mail versions prior to 2.0.2 it is possible...
Medium
6
CVE-2025-6705
A vulnerability in the Eclipse Open VSX Registry’s automated publishing...
High
7.6
CVE-2025-55102
A denial-of-service vulnerability exists in the NetX IPv6 component functionality...
High
8.7
CVE-2025-55100
Potential out-of-bounds read in _ux_host_class_audio10_sam_parse_func()
Low
2.4
CVE-2025-55099
Potential out-of-bounds read in _ux_host_class_audio_alternate_setting_locate()
Low
2.4
Affected Vendor
Eclipse Foundation
View all reports →Affected Software
OpenJ9
Vulnerable Versions:
0
Timeline
Official Publish:
November 15th, 2023
Last Modified:
November 3rd, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
Weaknesses (CWE)
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.