CVE-2023-5676
Moderate
Eclipse OpenJ9 possible infinite busy hang
In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang on a spinlock or a segmentation fault if a shutdown signal (SIGTERM, SIGINT or SIGHUP) is received before the JVM has finished initializing.
Exploit probability
0.4%
Published
November 15, 2023
Required by
Not available
Last source change
August 12, 2026
02 / AFFECTED SOFTWARE
Affected packages
30 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Open Source Vulnerabilities
CVE-2023-5676
View original source
In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang on a spinlock or a segmentation fault if a shutdown signal (SIGTERM, SIGINT or SIGHUP) is received before the JVM has finished initializing.
05 / REFERENCES
Further evidence
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/5xxx/CVE-2023-5676.json
- https://github.com/eclipse-openj9/openj9/pull/18085
- https://gitlab.eclipse.org/security/cve-assignement/-/issues/13
- https://nvd.nist.gov/vuln/detail/CVE-2023-5676
- https://security.netapp.com/advisory/ntap-20241108-0002/