Medium WID-SEC-2024-0110 3 CVEs

Oracle Database Server: Mehrere Schwachstellen

Published Jan 16, 2024 · Updated Jan 16, 2024 · de-DE

Vendor: Oracle Product: Database Server Product: Database Server <= 19.21 Product: Database Server <= 21.12 Product: Database Server 23.3 Platform: Linux Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Oracle Database Server ausnutzen, um die Integrität und Verfügbarkeit zu gefährden.

Product

Die Oracle Datenbank ist ein weit verbreitetes relationales Datenbanksystem.

Vulnerabilities 3

High 8.8

CVE-2023-38545 Public exploit EPSS 78%

This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the h…

curl curl curl curl Debian Ubuntu Azure Linux Alpine Wolfi

Oct 18, 2023
Medium 6.5

CVE-2024-20903

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.21 a…

Oracle Database - Enterprise Edition

Feb 17, 2024
Low 2.7

CVE-2022-21432

Vulnerability in the Oracle Database - Enterprise Edition RDBMS Security component of Oracle Database Server. Supported…

Oracle Text

Jul 19, 2022

Revision history

2024-01-16 #1
Initiale Fassung

References

Oracle Critical Patch Update Advisory - January 2024 - Appendix Oracle Database Server vom 2024-01-16
https://www.oracle.com/security-alerts/cpujan2024.html#AppendixDB