Oracle Database Server: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 5

• High 7.5
  CVE-2022-43680 Public exploit

  In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEnt…

  thunderbird insighttoolkit4 expat swish-e Debian Ubuntu Azure Linux Alpine
  Oct 24, 2022
• Medium 4.9
  CVE-2023-22034

  Vulnerability in the Unified Audit component of Oracle Database Server. Supported versions that are affected are 19.3-1…

  Oracle Database - Enterprise Edition
  Jul 18, 2023
• Medium 4.8
  CVE-2023-23931

  Cipher.update_into can corrupt memory in pyca cryptography

  cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions `Cipher.update_into` would accept Python objects which implement the buffer protocol, but provide only immutable buffers. This would a…

  pyca cryptography mitmproxy cryptography Debian Ubuntu Azure Linux Alpine Wolfi PyPI
  Feb 7, 2023
• Low 3.7
  CVE-2023-21949

  Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affect…

  Oracle Advanced Networking Option
  Jul 18, 2023
• Low 3.1
  CVE-2023-22052

  Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.19 a…

  Oracle Database - Enterprise Edition
  Jul 18, 2023

Revision history

1. 2023-07-18 #1

   Initiale Fassung

References

• Oracle Critical Patch Update Advisory - July 2023 - Appendix Oracle Database Server vom 2023-07-18
  https://www.oracle.com/security-alerts/cpujul2023.html#AppendixDB