Medium WID-SEC-2024-1645 8 CVEs

Oracle Database Server: Mehrere Schwachstellen

Published Jul 16, 2024 · Updated Jul 16, 2024 · de-DE

Vendor: Oracle Product: Database Server Platform: Windows

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Database Server ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

Product

Die Oracle Datenbank ist ein weit verbreitetes relationales Datenbanksystem.

Vulnerabilities 8

High 7.4

CVE-2024-0397

Memory race condition in ssl.SSLContext certificate store methods

A defect was discovered in the Python “ssl” module where there is a memory race condition with the ssl.SSLContext methods “cert_store_stats()” and “get_ca_certs()”. The race condition can be triggered if the methods are called at the same time as certificates…

Python Software Foundation CPython python3.4 python2.7 Debian Ubuntu Azure Linux

Jun 17, 2024
High 7.2

CVE-2024-21184

Vulnerability in the Oracle Database RDBMS Security component of Oracle Database Server. Supported versions that are af…

Oracle Database - Enterprise Edition

Jul 16, 2024
Medium 5.8

CVE-2024-21126

Vulnerability in the Oracle Database Portable Clusterware component of Oracle Database Server. Supported versions that …

Oracle Database - Enterprise Edition

Jul 16, 2024
Medium 5.3

CVE-2022-41881

HAProxyMessageDecoder Stack Exhaustion DoS

Netty project is an event-driven asynchronous network application framework. In versions prior to 4.1.86.Final, a StackOverflowError can be raised when parsing a malformed crafted message due to an infinite recursion. This issue is patched in version 4.1.86.F…

netty netty netty netty Debian Ubuntu Maven

Dec 12, 2022
Medium 5.3

CVE-2024-4603

Excessive time spent checking DSA keys and parameters

Issue summary: Checking excessively long DSA keys or parameters may be very slow. Impact summary: Applications that use the functions EVP_PKEY_param_check() or EVP_PKEY_public_check() to check a DSA public key or DSA parameters may experience long delays. Whe…

OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi

May 16, 2024
Low 3.7

CVE-2024-21098

Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Co…

Oracle GraalVM openjdk-9 openjdk-13 Ubuntu Alpine

Apr 16, 2024
Low 3.1

CVE-2024-21174

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.23, …

Oracle Database - Enterprise Edition

Jul 16, 2024
Low 2.3

CVE-2024-21123

Vulnerability in the Oracle Database Core component of Oracle Database Server. Supported versions that are affected are…

Oracle Database - Enterprise Edition

Jul 16, 2024

Revision history

2024-07-16 #1
Initiale Fassung

References

Oracle Critical Patch Update Advisory - July 2024 - Appendix Oracle Database Server vom 2024-07-16
https://www.oracle.com/security-alerts/cpujul2024.html#AppendixDB