High WID-SEC-2024-0114 9 CVEs

Oracle Systems: Mehrere Schwachstellen

Published Jan 16, 2024 · Updated Jan 16, 2024 · de-DE

Vendor: Oracle Product: Systems Product: Systems < XCP2420 Product: Systems < XCP2430 Product: Systems < XCP3120 Product: Systems < XCP3130 Product: Systems < XCP4030 Product: Systems < XCP4040 Product: Systems 11 Product: Systems 3 Product: Systems 4 Product: Systems 5 Product: Systems 8.8

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Systems ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

Product

Oracle Systems umfasst eine Sammlung von Hardware, Betriebssystemen, Servern und Anwendungen.

Vulnerabilities 9

High 7.5

CVE-2022-4450 EPSS 29%

Double free after calling PEM_read_bio_ex

The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data. If the function succeeds then the "name_out", "header" and "data" arguments are populated with pointers to…

OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi crates.io

Feb 8, 2023
Medium 5.5

CVE-2024-20946

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affect…

Oracle Solaris Operating System

Jan 16, 2024
Medium 4.8

CVE-2024-20906

Vulnerability in the Integrated Lights Out Manager (ILOM) product of Oracle Systems (component: System Management). Sup…

Oracle SSM - (hot-tamale) ILOM: Integrated Lights Out Manager

Jan 16, 2024
Medium 4.4

CVE-2024-20959

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core). The supported versio…

Oracle Sun ZFS Storage Appliance Kit (AK) Software

Jan 16, 2024
Medium 4.3

CVE-2023-21833

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Object Store). The supporte…

Oracle Sun ZFS Storage Appliance Kit (AK) Software

Feb 17, 2024
Low 3.8

CVE-2024-20920

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The supported version that is af…

Oracle Solaris Operating System

Jan 16, 2024
Low 2.3

CVE-2024-20914

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core). The supported versio…

Oracle Sun ZFS Storage Appliance Kit (AK) Software

Jan 16, 2024
Unscored —

CVE-2021-43527 EPSS 18%

NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DE…

Mozilla NSS thunderbird nss Debian Ubuntu Azure Linux Alpine

Dec 8, 2021
Unscored —

CVE-2022-29155 EPSS 64%

In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql…

openldap openldap openldap openldap Debian Ubuntu Azure Linux Alpine

May 4, 2022

Revision history

2024-01-16 #1
Initiale Fassung

References

Oracle Critical Patch Update Advisory - January 2024 - Appendix Oracle Systems vom 2024-01-16
https://www.oracle.com/security-alerts/cpujan2024.html#AppendixSUNS