High NCSC-2024-0291 8 CVEs

Kwetsbaarheden verholpen in Oracle Database Server

Published Jul 17, 2024 · Updated Jul 17, 2024 · nl

Vendor: Oracle Product: Database Server

Summary

Er zijn kwetsbaarheden verholpen in Oracle Database Server.

Details

Interpretaties
Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade:

* Denial-of-Service (DoS)
* Toegang tot gevoelige gegevens
* Manipulatie van gegevens
* Omzeilen van beveiligingsmaatregel

Oplossingen
Oracle heeft updates beschikbaar gesteld om de kwetsbaarheden te verhelpen. Zie de referenties voor meer informatie.

Vulnerabilities 8

High 7.4

CVE-2024-0397

Memory race condition in ssl.SSLContext certificate store methods

A defect was discovered in the Python “ssl” module where there is a memory race condition with the ssl.SSLContext methods “cert_store_stats()” and “get_ca_certs()”. The race condition can be triggered if the methods are called at the same time as certificates…

Python Software Foundation CPython python3.4 python2.7 Debian Ubuntu Azure Linux

Jun 17, 2024
High 7.2

CVE-2024-21184

Vulnerability in the Oracle Database RDBMS Security component of Oracle Database Server. Supported versions that are af…

Oracle Database - Enterprise Edition

Jul 16, 2024
Medium 5.8

CVE-2024-21126

Vulnerability in the Oracle Database Portable Clusterware component of Oracle Database Server. Supported versions that …

Oracle Database - Enterprise Edition

Jul 16, 2024
Medium 5.3

CVE-2022-41881

HAProxyMessageDecoder Stack Exhaustion DoS

Netty project is an event-driven asynchronous network application framework. In versions prior to 4.1.86.Final, a StackOverflowError can be raised when parsing a malformed crafted message due to an infinite recursion. This issue is patched in version 4.1.86.F…

netty netty netty netty Debian Ubuntu Maven

Dec 12, 2022
Medium 5.3

CVE-2024-4603

Excessive time spent checking DSA keys and parameters

Issue summary: Checking excessively long DSA keys or parameters may be very slow. Impact summary: Applications that use the functions EVP_PKEY_param_check() or EVP_PKEY_public_check() to check a DSA public key or DSA parameters may experience long delays. Whe…

OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi

May 16, 2024
Low 3.7

CVE-2024-21098

Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Co…

Oracle GraalVM openjdk-9 openjdk-13 Ubuntu Alpine

Apr 16, 2024
Low 3.1

CVE-2024-21174

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.23, …

Oracle Database - Enterprise Edition

Jul 16, 2024
Low 2.3

CVE-2024-21123

Vulnerability in the Oracle Database Core component of Oracle Database Server. Supported versions that are affected are…

Oracle Database - Enterprise Edition

Jul 16, 2024

Revision history

2024-07-17 #0
Initiele versie

References

Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2024-0397
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2024-21098
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2024-21123
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2024-21126
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2024-21174
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2024-21184
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2024-4603
Reference - cveprojectv5; ibm; nvd; oracle
https://www.oracle.com/security-alerts/cpujul2024.html