CVE-2023-5676: Eclipse OPENJ9

Medium severity, CVSS 5.9. EPSS: 0.4% chance of exploitation in the next 30 days.

In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang on a spinlock or a segmentation fault if a shutdown signal (SIGTERM, SIGINT or SIGHUP) is received before the JVM has finished initializing.

Affected products

• Eclipse OPENJ9: before 0.41.0 (fixed in 0.41.0)

Published 2023-11-15. Last modified 2026-06-17.