Medium WID-SEC-2024-1629 1 CVE

Oracle REST Data Services: Schwachstelle gefährdet Verfügbarkeit

Published Jul 16, 2024 · Updated Jul 16, 2024 · de-DE

Vendor: Oracle Product: REST Data Services Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Oracle REST Data Services ausnutzen, um die Verfügbarkeit zu gefährden.

Product

Oracle REST Data Services (ORDS) ermöglicht die Erstellung grundlegender RESTful Web Services unter Verwendung von PL/SQL.

Vulnerabilities 1

Medium 5.9

CVE-2023-4043

Parsson DoS when parsing numbers from untrusted sources

In Eclipse Parsson before versions 1.1.4 and 1.0.5, Parsing JSON from untrusted sources can lead malicious actors to exploit the fact that the built-in support for parsing numbers with large scale in Java has a number of edge cases where the input text of a n…

Eclipse Foundation Parsson org.eclipse.parsson:project Maven

Nov 3, 2023

Revision history

2024-07-16 #1
Initiale Fassung

References

Oracle Critical Patch Update Advisory - July 2024 - Appendix Oracle REST Data Services vom 2024-07-16
https://www.oracle.com/security-alerts/cpujul2024.html#AppendixREST