Skip to content
OpenAdvisories
Medium WID-SEC-2025-0826 2 CVEs

Oracle TimesTen In-Memory Database: Mehrere Schwachstellen

Published Apr 15, 2025 · Updated Apr 15, 2025 · de-DE

Vendor: Oracle Product: TimesTen In-Memory Database Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle TimesTen In-Memory Database ausnutzen, um die Verfügbarkeit zu gefährden.

Product

Die Oracle Datenbank ist ein weit verbreitetes relationales Datenbanksystem.

Vulnerabilities 2

  • High 7.5
    CVE-2025-24970

    SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine

    Netty, an asynchronous, event-driven network application framework, has a vulnerability starting in version 4.1.91.Final and prior to version 4.1.118.Final. When a special crafted packet is received via SslHandler it doesn't correctly handle validation of suc…

    netty netty druid thingsboard-tb-node Ubuntu Wolfi Maven
  • Medium 4.3
    CVE-2024-47554

    Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader

    Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input. This issue affects Apache Commons IO: from 2.0 before …

    Apache Software Foundation Apache Commons IO druid kserve-storage-controller Debian Ubuntu Azure Linux Wolfi Maven

Revision history

  1. #1

    Initiale Fassung

References