Skip to content
OpenAdvisories
Medium WID-SEC-2024-3199 2 CVEs

Oracle Secure Backup: Mehrere Schwachstellen

Published Oct 15, 2024 · Updated Oct 15, 2024 · de-DE

Vendor: Oracle Product: Secure Backup Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Secure Backup ausnutzen, um die Verfügbarkeit zu gefährden.

Product

Oracle Secure Backup ist eine Managementsoftware für Bandsicherungen. Sie ermöglicht eine sichere Verschlüsselung der Daten beim Schreiben auf das Band.

Vulnerabilities 2

  • Critical 9.8
    CVE-2024-38476 Public exploit EPSS 42%

    Apache HTTP Server may use exploitable/malicious backend application output to run local handlers via internal redirect

    Vulnerability in core of Apache HTTP Server 2.4.59 and earlier are vulnerably to information disclosure, SSRF or local script execution via backend applications whose response headers are malicious or exploitable. Users are recommended to upgrade to version 2…

    Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
  • Critical 9.8
    CVE-2024-4741

    Use After Free with SSL_free_buffers

    Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause memory to be accessed that was previously freed in some situations Impact summary: A use after free can have a range of potential consequences such as the corruption of valid data, cra…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi

Revision history

  1. #1

    Initiale Fassung

References