Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2024-21126
Vulnerability from cvelistv5
Vendor | Product | Version | |
---|---|---|---|
▼ | Oracle Corporation | Database - Enterprise Edition |
Version: 19.3 < Version: 21.3 < |
|
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-01T22:13:42.700Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "name": "Oracle Advisory", "tags": [ "vendor-advisory", "x_transferred" ], "url": "https://www.oracle.com/security-alerts/cpujul2024.html" } ], "title": "CVE Program Container" }, { "affected": [ { "cpes": [ "cpe:2.3:a:oracle:database:-:*:*:*:enterprise:*:*:*" ], "defaultStatus": "unknown", "product": "database", "vendor": "oracle", "versions": [ { "lessThanOrEqual": "21.14", "status": "affected", "version": "21.3", "versionType": "custom" }, { "lessThanOrEqual": "19.23", "status": "affected", "version": "19.3", "versionType": "custom" } ] } ], "metrics": [ { "other": { "content": { "id": "CVE-2024-21126", "options": [ { "Exploitation": "none" }, { "Automatable": "yes" }, { "Technical Impact": "partial" } ], "role": "CISA Coordinator", "timestamp": "2024-08-05T17:45:10.937095Z", "version": "2.0.3" }, "type": "ssvc" } } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-400", "description": "CWE-400 Uncontrolled Resource Consumption", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2024-08-29T19:26:29.803Z", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP" }, "title": "CISA ADP Vulnrichment" } ], "cna": { "affected": [ { "product": "Database - Enterprise Edition", "vendor": "Oracle Corporation", "versions": [ { "lessThanOrEqual": "19.23", "status": "affected", "version": "19.3", "versionType": "custom" }, { "lessThanOrEqual": "21.14", "status": "affected", "version": "21.3", "versionType": "custom" } ] } ], "descriptions": [ { "lang": "en-US", "value": "Vulnerability in the Oracle Database Portable Clusterware component of Oracle Database Server. Supported versions that are affected are 19.3-19.23 and 21.3-21.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via DNS to compromise Oracle Database Portable Clusterware. While the vulnerability is in Oracle Database Portable Clusterware, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Database Portable Clusterware. CVSS 3.1 Base Score 5.8 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L)." } ], "metrics": [ { "cvssV3_1": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L", "version": "3.1" } } ], "problemTypes": [ { "descriptions": [ { "description": "Easily exploitable vulnerability allows unauthenticated attacker with network access via DNS to compromise Oracle Database Portable Clusterware. While the vulnerability is in Oracle Database Portable Clusterware, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Database Portable Clusterware.", "lang": "en-US" } ] } ], "providerMetadata": { "dateUpdated": "2024-07-16T22:39:52.158Z", "orgId": "43595867-4340-4103-b7a2-9a5208d29a85", "shortName": "oracle" }, "references": [ { "name": "Oracle Advisory", "tags": [ "vendor-advisory" ], "url": "https://www.oracle.com/security-alerts/cpujul2024.html" } ] } }, "cveMetadata": { "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85", "assignerShortName": "oracle", "cveId": "CVE-2024-21126", "datePublished": "2024-07-16T22:39:52.158Z", "dateReserved": "2023-12-07T22:28:10.681Z", "dateUpdated": "2024-08-29T19:26:29.803Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "vulnerability-lookup:meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2024-21126\",\"sourceIdentifier\":\"secalert_us@oracle.com\",\"published\":\"2024-07-16T23:15:12.177\",\"lastModified\":\"2024-11-21T08:53:50.000\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Vulnerability in the Oracle Database Portable Clusterware component of Oracle Database Server. Supported versions that are affected are 19.3-19.23 and 21.3-21.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via DNS to compromise Oracle Database Portable Clusterware. While the vulnerability is in Oracle Database Portable Clusterware, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Database Portable Clusterware. CVSS 3.1 Base Score 5.8 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L).\"},{\"lang\":\"es\",\"value\":\"Vulnerabilidad en el componente Oracle Database Portable Clusterware de Oracle Database Server. Las versiones compatibles que se ven afectadas son 19.3-19.23 y 21.3-21.14. Una vulnerabilidad f\u00e1cilmente explotable permite que un atacante no autenticado con acceso a la red a trav\u00e9s de DNS comprometa Oracle Database Portable Clusterware. Si bien la vulnerabilidad se encuentra en Oracle Database Portable Clusterware, los ataques pueden afectar significativamente a productos adicionales (cambio de alcance). Los ataques exitosos de esta vulnerabilidad pueden resultar en una capacidad no autorizada para causar una denegaci\u00f3n de servicio parcial (DOS parcial) de Oracle Database Portable Clusterware. CVSS 3.1 Puntuaci\u00f3n base 5.8 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L).\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"secalert_us@oracle.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L\",\"baseScore\":5.8,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":3.9,\"impactScore\":1.4}]},\"weaknesses\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-400\"}]}],\"references\":[{\"url\":\"https://www.oracle.com/security-alerts/cpujul2024.html\",\"source\":\"secalert_us@oracle.com\"},{\"url\":\"https://www.oracle.com/security-alerts/cpujul2024.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}" } }
ncsc-2024-0291
Vulnerability from csaf_ncscnl
Notes
{ "document": { "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "nl", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." }, { "category": "description", "text": "Er zijn kwetsbaarheden verholpen in Oracle Database Server.", "title": "Feiten" }, { "category": "description", "text": "Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorie\u00ebn schade:\n\n* Denial-of-Service (DoS)\n* Toegang tot gevoelige gegevens\n* Manipulatie van gegevens\n* Omzeilen van beveiligingsmaatregel", "title": "Interpretaties" }, { "category": "description", "text": "Oracle heeft updates beschikbaar gesteld om de kwetsbaarheden te verhelpen. Zie de referenties voor meer informatie.", "title": "Oplossingen" }, { "category": "general", "text": "medium", "title": "Kans" }, { "category": "general", "text": "high", "title": "Schade" }, { "category": "general", "text": "Improper Authorization", "title": "CWE-285" }, { "category": "general", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" }, { "category": "general", "text": "Uncontrolled Recursion", "title": "CWE-674" } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "Nationaal Cyber Security Centrum", "namespace": "https://www.ncsc.nl/" }, "references": [ { "category": "external", "summary": "Source - nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0397" }, { "category": "external", "summary": "Source - nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21098" }, { "category": "external", "summary": "Source - nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21123" }, { "category": "external", "summary": "Source - nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21126" }, { "category": "external", "summary": "Source - nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21174" }, { "category": "external", "summary": "Source - nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21184" }, { "category": "external", "summary": "Source - nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4603" }, { "category": "external", "summary": "Reference - oracle", "url": "https://www.oracle.com/docs/tech/security-alerts/cpujul2024csaf.json" }, { "category": "external", "summary": "Reference - cveprojectv5; ibm; nvd; oracle", "url": "https://www.oracle.com/security-alerts/cpujul2024.html" } ], "title": " Kwetsbaarheden verholpen in Oracle Database Server", "tracking": { "current_release_date": "2024-07-17T13:51:54.185475Z", "id": "NCSC-2024-0291", "initial_release_date": "2024-07-17T13:51:54.185475Z", "revision_history": [ { "date": "2024-07-17T13:51:54.185475Z", "number": "0", "summary": "Initiele versie" } ], "status": "final", "version": "1.0.0" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764785", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database___19c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764790", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database___21c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764843", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database_-_machine_learning_for_python___21c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503607", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database_core___23.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764838", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database_data_redaction___19c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764844", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database_data_redaction___21c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764839", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database_fleet_patching___19c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764845", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database_fleet_patching___21c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764787", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database_oml4py___21c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764846", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database_portable_clusterware___21c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764840", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database_rdbms_security___19c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764847", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database_rdbms_security___21c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764784", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database_recovery_manager___19c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764788", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database_recovery_manager___21c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764841", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database_sqlcl___19c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764848", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database_sqlcl___21c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764789", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database_workload_manager___21c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764842", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:_graalvm_multilingual_engine___21c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764783", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:_java_vm___19c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764786", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:_java_vm___21c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503604", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:_java_vm___23.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503605", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:_multilingual_engine___23.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503606", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:_oml4py___23.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-266118", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503896", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-205254", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-205265", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.10:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-205230", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.11:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-909875", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.12:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-205250", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.13:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-909872", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.14:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-909878", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.15:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-909879", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.16:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-909880", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.17:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-909876", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.18:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-220917", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.19:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503891", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-816314", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.20:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-816313", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.21:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-909877", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.22:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503897", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.23:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-205268", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-205281", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-205295", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-205256", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.6:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-205216", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.7:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-909874", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.8:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-909873", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.9:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503890", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:21.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503893", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:21.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-220916", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:21.10:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-611586", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:21.11:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-816312", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:21.12:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-912081", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:21.13:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503257", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:21.14:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503900", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:21.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-205284", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:21.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503898", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:21.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503892", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:21.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503894", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:21.6:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503889", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:21.7:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503895", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:21.8:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503899", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:21.9:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503256", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:23.4:*:*:*:*:*:*:*" } } } ], "category": "vendor", "name": "oracle" } ] }, "vulnerabilities": [ { "cve": "CVE-2022-41881", "cwe": { "id": "CWE-674", "name": "Uncontrolled Recursion" }, "notes": [ { "category": "other", "text": "Uncontrolled Recursion", "title": "CWE-674" }, { "category": "other", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" } ], "product_status": { "known_affected": [ "CSAFPID-266118", "CSAFPID-764783", "CSAFPID-764784", "CSAFPID-764785", "CSAFPID-764786", "CSAFPID-764787", "CSAFPID-764788", "CSAFPID-764789", "CSAFPID-764790", "CSAFPID-764838", "CSAFPID-764839", "CSAFPID-764840", "CSAFPID-764841", "CSAFPID-764842", "CSAFPID-764843", "CSAFPID-764844", "CSAFPID-764845", "CSAFPID-764846", "CSAFPID-764847", "CSAFPID-764848", "CSAFPID-1503604", "CSAFPID-1503605", "CSAFPID-1503606", "CSAFPID-1503607" ] }, "references": [ { "category": "self", "summary": "CVE-2022-41881", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-41881.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-266118", "CSAFPID-764783", "CSAFPID-764784", "CSAFPID-764785", "CSAFPID-764786", "CSAFPID-764787", "CSAFPID-764788", "CSAFPID-764789", "CSAFPID-764790", "CSAFPID-764838", "CSAFPID-764839", "CSAFPID-764840", "CSAFPID-764841", "CSAFPID-764842", "CSAFPID-764843", "CSAFPID-764844", "CSAFPID-764845", "CSAFPID-764846", "CSAFPID-764847", "CSAFPID-764848", "CSAFPID-1503604", "CSAFPID-1503605", "CSAFPID-1503606", "CSAFPID-1503607" ] } ], "title": "CVE-2022-41881" }, { "cve": "CVE-2024-0397", "product_status": { "known_affected": [ "CSAFPID-266118", "CSAFPID-1503604", "CSAFPID-1503605", "CSAFPID-1503606", "CSAFPID-1503607" ] }, "references": [ { "category": "self", "summary": "CVE-2024-0397", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-0397.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.4, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-266118", "CSAFPID-1503604", "CSAFPID-1503605", "CSAFPID-1503606", "CSAFPID-1503607" ] } ], "title": "CVE-2024-0397" }, { "cve": "CVE-2024-4603", "product_status": { "known_affected": [ "CSAFPID-266118", "CSAFPID-1503604", "CSAFPID-1503605", "CSAFPID-1503606", "CSAFPID-1503607" ] }, "references": [ { "category": "self", "summary": "CVE-2024-4603", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-4603.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-266118", "CSAFPID-1503604", "CSAFPID-1503605", "CSAFPID-1503606", "CSAFPID-1503607" ] } ], "title": "CVE-2024-4603" }, { "cve": "CVE-2024-21098", "cwe": { "id": "CWE-285", "name": "Improper Authorization" }, "notes": [ { "category": "other", "text": "Improper Authorization", "title": "CWE-285" } ], "product_status": { "known_affected": [ "CSAFPID-266118", "CSAFPID-1503604", "CSAFPID-1503605", "CSAFPID-1503606", "CSAFPID-1503607" ] }, "references": [ { "category": "self", "summary": "CVE-2024-21098", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21098.json" } ], "scores": [ { "cvss_v3": { "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "CSAFPID-266118", "CSAFPID-1503604", "CSAFPID-1503605", "CSAFPID-1503606", "CSAFPID-1503607" ] } ], "title": "CVE-2024-21098" }, { "cve": "CVE-2024-21123", "cwe": { "id": "CWE-285", "name": "Improper Authorization" }, "notes": [ { "category": "other", "text": "Improper Authorization", "title": "CWE-285" } ], "product_status": { "known_affected": [ "CSAFPID-266118", "CSAFPID-1503604", "CSAFPID-1503605", "CSAFPID-1503606", "CSAFPID-1503607" ] }, "references": [ { "category": "self", "summary": "CVE-2024-21123", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21123.json" } ], "title": "CVE-2024-21123" }, { "cve": "CVE-2024-21126", "cwe": { "id": "CWE-404", "name": "Improper Resource Shutdown or Release" }, "notes": [ { "category": "other", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" } ], "product_status": { "known_affected": [ "CSAFPID-266118", "CSAFPID-1503604", "CSAFPID-1503605", "CSAFPID-1503606", "CSAFPID-1503607" ] }, "references": [ { "category": "self", "summary": "CVE-2024-21126", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21126.json" } ], "scores": [ { "cvss_v3": { "baseScore": 5.8, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L", "version": "3.1" }, "products": [ "CSAFPID-266118", "CSAFPID-1503604", "CSAFPID-1503605", "CSAFPID-1503606", "CSAFPID-1503607" ] } ], "title": "CVE-2024-21126" }, { "cve": "CVE-2024-21174", "product_status": { "known_affected": [ "CSAFPID-266118", "CSAFPID-1503604", "CSAFPID-1503605", "CSAFPID-1503606", "CSAFPID-1503607" ] }, "references": [ { "category": "self", "summary": "CVE-2024-21174", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21174.json" } ], "scores": [ { "cvss_v3": { "baseScore": 3.1, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "CSAFPID-266118", "CSAFPID-1503604", "CSAFPID-1503605", "CSAFPID-1503606", "CSAFPID-1503607" ] } ], "title": "CVE-2024-21174" }, { "cve": "CVE-2024-21184", "product_status": { "known_affected": [ "CSAFPID-266118", "CSAFPID-1503604", "CSAFPID-1503605", "CSAFPID-1503606", "CSAFPID-1503607" ] }, "references": [ { "category": "self", "summary": "CVE-2024-21184", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21184.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.2, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-266118", "CSAFPID-1503604", "CSAFPID-1503605", "CSAFPID-1503606", "CSAFPID-1503607" ] } ], "title": "CVE-2024-21184" } ] }
NCSC-2024-0291
Vulnerability from csaf_ncscnl
Notes
{ "document": { "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "nl", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." }, { "category": "description", "text": "Er zijn kwetsbaarheden verholpen in Oracle Database Server.", "title": "Feiten" }, { "category": "description", "text": "Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorie\u00ebn schade:\n\n* Denial-of-Service (DoS)\n* Toegang tot gevoelige gegevens\n* Manipulatie van gegevens\n* Omzeilen van beveiligingsmaatregel", "title": "Interpretaties" }, { "category": "description", "text": "Oracle heeft updates beschikbaar gesteld om de kwetsbaarheden te verhelpen. Zie de referenties voor meer informatie.", "title": "Oplossingen" }, { "category": "general", "text": "medium", "title": "Kans" }, { "category": "general", "text": "high", "title": "Schade" }, { "category": "general", "text": "Improper Authorization", "title": "CWE-285" }, { "category": "general", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" }, { "category": "general", "text": "Uncontrolled Recursion", "title": "CWE-674" } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "Nationaal Cyber Security Centrum", "namespace": "https://www.ncsc.nl/" }, "references": [ { "category": "external", "summary": "Source - nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0397" }, { "category": "external", "summary": "Source - nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21098" }, { "category": "external", "summary": "Source - nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21123" }, { "category": "external", "summary": "Source - nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21126" }, { "category": "external", "summary": "Source - nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21174" }, { "category": "external", "summary": "Source - nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21184" }, { "category": "external", "summary": "Source - nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4603" }, { "category": "external", "summary": "Reference - oracle", "url": "https://www.oracle.com/docs/tech/security-alerts/cpujul2024csaf.json" }, { "category": "external", "summary": "Reference - cveprojectv5; ibm; nvd; oracle", "url": "https://www.oracle.com/security-alerts/cpujul2024.html" } ], "title": " Kwetsbaarheden verholpen in Oracle Database Server", "tracking": { "current_release_date": "2024-07-17T13:51:54.185475Z", "id": "NCSC-2024-0291", "initial_release_date": "2024-07-17T13:51:54.185475Z", "revision_history": [ { "date": "2024-07-17T13:51:54.185475Z", "number": "0", "summary": "Initiele versie" } ], "status": "final", "version": "1.0.0" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764785", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database___19c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764790", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database___21c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764843", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database_-_machine_learning_for_python___21c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503607", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database_core___23.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764838", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database_data_redaction___19c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764844", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database_data_redaction___21c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764839", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database_fleet_patching___19c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764845", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database_fleet_patching___21c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764787", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database_oml4py___21c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764846", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database_portable_clusterware___21c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764840", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database_rdbms_security___19c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764847", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database_rdbms_security___21c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764784", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database_recovery_manager___19c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764788", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database_recovery_manager___21c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764841", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database_sqlcl___19c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764848", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database_sqlcl___21c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764789", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database_workload_manager___21c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764842", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:_graalvm_multilingual_engine___21c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764783", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:_java_vm___19c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764786", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:_java_vm___21c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503604", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:_java_vm___23.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503605", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:_multilingual_engine___23.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503606", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:_oml4py___23.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-266118", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503896", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-205254", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-205265", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.10:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-205230", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.11:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-909875", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.12:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-205250", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.13:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-909872", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.14:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-909878", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.15:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-909879", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.16:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-909880", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.17:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-909876", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.18:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-220917", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.19:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503891", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-816314", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.20:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-816313", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.21:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-909877", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.22:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503897", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.23:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-205268", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-205281", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-205295", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-205256", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.6:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-205216", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.7:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-909874", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.8:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-909873", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.9:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503890", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:21.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503893", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:21.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-220916", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:21.10:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-611586", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:21.11:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-816312", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:21.12:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-912081", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:21.13:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503257", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:21.14:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503900", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:21.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-205284", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:21.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503898", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:21.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503892", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:21.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503894", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:21.6:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503889", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:21.7:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503895", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:21.8:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503899", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:21.9:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503256", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:23.4:*:*:*:*:*:*:*" } } } ], "category": "vendor", "name": "oracle" } ] }, "vulnerabilities": [ { "cve": "CVE-2022-41881", "cwe": { "id": "CWE-674", "name": "Uncontrolled Recursion" }, "notes": [ { "category": "other", "text": "Uncontrolled Recursion", "title": "CWE-674" }, { "category": "other", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" } ], "product_status": { "known_affected": [ "CSAFPID-266118", "CSAFPID-764783", "CSAFPID-764784", "CSAFPID-764785", "CSAFPID-764786", "CSAFPID-764787", "CSAFPID-764788", "CSAFPID-764789", "CSAFPID-764790", "CSAFPID-764838", "CSAFPID-764839", "CSAFPID-764840", "CSAFPID-764841", "CSAFPID-764842", "CSAFPID-764843", "CSAFPID-764844", "CSAFPID-764845", "CSAFPID-764846", "CSAFPID-764847", "CSAFPID-764848", "CSAFPID-1503604", "CSAFPID-1503605", "CSAFPID-1503606", "CSAFPID-1503607" ] }, "references": [ { "category": "self", "summary": "CVE-2022-41881", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-41881.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-266118", "CSAFPID-764783", "CSAFPID-764784", "CSAFPID-764785", "CSAFPID-764786", "CSAFPID-764787", "CSAFPID-764788", "CSAFPID-764789", "CSAFPID-764790", "CSAFPID-764838", "CSAFPID-764839", "CSAFPID-764840", "CSAFPID-764841", "CSAFPID-764842", "CSAFPID-764843", "CSAFPID-764844", "CSAFPID-764845", "CSAFPID-764846", "CSAFPID-764847", "CSAFPID-764848", "CSAFPID-1503604", "CSAFPID-1503605", "CSAFPID-1503606", "CSAFPID-1503607" ] } ], "title": "CVE-2022-41881" }, { "cve": "CVE-2024-0397", "product_status": { "known_affected": [ "CSAFPID-266118", "CSAFPID-1503604", "CSAFPID-1503605", "CSAFPID-1503606", "CSAFPID-1503607" ] }, "references": [ { "category": "self", "summary": "CVE-2024-0397", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-0397.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.4, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-266118", "CSAFPID-1503604", "CSAFPID-1503605", "CSAFPID-1503606", "CSAFPID-1503607" ] } ], "title": "CVE-2024-0397" }, { "cve": "CVE-2024-4603", "product_status": { "known_affected": [ "CSAFPID-266118", "CSAFPID-1503604", "CSAFPID-1503605", "CSAFPID-1503606", "CSAFPID-1503607" ] }, "references": [ { "category": "self", "summary": "CVE-2024-4603", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-4603.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-266118", "CSAFPID-1503604", "CSAFPID-1503605", "CSAFPID-1503606", "CSAFPID-1503607" ] } ], "title": "CVE-2024-4603" }, { "cve": "CVE-2024-21098", "cwe": { "id": "CWE-285", "name": "Improper Authorization" }, "notes": [ { "category": "other", "text": "Improper Authorization", "title": "CWE-285" } ], "product_status": { "known_affected": [ "CSAFPID-266118", "CSAFPID-1503604", "CSAFPID-1503605", "CSAFPID-1503606", "CSAFPID-1503607" ] }, "references": [ { "category": "self", "summary": "CVE-2024-21098", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21098.json" } ], "scores": [ { "cvss_v3": { "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "CSAFPID-266118", "CSAFPID-1503604", "CSAFPID-1503605", "CSAFPID-1503606", "CSAFPID-1503607" ] } ], "title": "CVE-2024-21098" }, { "cve": "CVE-2024-21123", "cwe": { "id": "CWE-285", "name": "Improper Authorization" }, "notes": [ { "category": "other", "text": "Improper Authorization", "title": "CWE-285" } ], "product_status": { "known_affected": [ "CSAFPID-266118", "CSAFPID-1503604", "CSAFPID-1503605", "CSAFPID-1503606", "CSAFPID-1503607" ] }, "references": [ { "category": "self", "summary": "CVE-2024-21123", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21123.json" } ], "title": "CVE-2024-21123" }, { "cve": "CVE-2024-21126", "cwe": { "id": "CWE-404", "name": "Improper Resource Shutdown or Release" }, "notes": [ { "category": "other", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" } ], "product_status": { "known_affected": [ "CSAFPID-266118", "CSAFPID-1503604", "CSAFPID-1503605", "CSAFPID-1503606", "CSAFPID-1503607" ] }, "references": [ { "category": "self", "summary": "CVE-2024-21126", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21126.json" } ], "scores": [ { "cvss_v3": { "baseScore": 5.8, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L", "version": "3.1" }, "products": [ "CSAFPID-266118", "CSAFPID-1503604", "CSAFPID-1503605", "CSAFPID-1503606", "CSAFPID-1503607" ] } ], "title": "CVE-2024-21126" }, { "cve": "CVE-2024-21174", "product_status": { "known_affected": [ "CSAFPID-266118", "CSAFPID-1503604", "CSAFPID-1503605", "CSAFPID-1503606", "CSAFPID-1503607" ] }, "references": [ { "category": "self", "summary": "CVE-2024-21174", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21174.json" } ], "scores": [ { "cvss_v3": { "baseScore": 3.1, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "CSAFPID-266118", "CSAFPID-1503604", "CSAFPID-1503605", "CSAFPID-1503606", "CSAFPID-1503607" ] } ], "title": "CVE-2024-21174" }, { "cve": "CVE-2024-21184", "product_status": { "known_affected": [ "CSAFPID-266118", "CSAFPID-1503604", "CSAFPID-1503605", "CSAFPID-1503606", "CSAFPID-1503607" ] }, "references": [ { "category": "self", "summary": "CVE-2024-21184", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21184.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.2, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-266118", "CSAFPID-1503604", "CSAFPID-1503605", "CSAFPID-1503606", "CSAFPID-1503607" ] } ], "title": "CVE-2024-21184" } ] }
ghsa-99h2-3927-3h39
Vulnerability from github
Vulnerability in the Oracle Database Portable Clusterware component of Oracle Database Server. Supported versions that are affected are 19.3-19.23 and 21.3-21.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via DNS to compromise Oracle Database Portable Clusterware. While the vulnerability is in Oracle Database Portable Clusterware, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Database Portable Clusterware. CVSS 3.1 Base Score 5.8 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L).
{ "affected": [], "aliases": [ "CVE-2024-21126" ], "database_specific": { "cwe_ids": [ "CWE-400" ], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-07-16T23:15:12Z", "severity": "MODERATE" }, "details": "Vulnerability in the Oracle Database Portable Clusterware component of Oracle Database Server. Supported versions that are affected are 19.3-19.23 and 21.3-21.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via DNS to compromise Oracle Database Portable Clusterware. While the vulnerability is in Oracle Database Portable Clusterware, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Database Portable Clusterware. CVSS 3.1 Base Score 5.8 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L).", "id": "GHSA-99h2-3927-3h39", "modified": "2024-07-17T00:32:54Z", "published": "2024-07-17T00:32:54Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21126" }, { "type": "WEB", "url": "https://www.oracle.com/security-alerts/cpujul2024.html" } ], "schema_version": "1.4.0", "severity": [ { "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L", "type": "CVSS_V3" } ] }
gsd-2024-21126
Vulnerability from gsd
{ "GSD": { "alias": "CVE-2024-21126", "id": "GSD-2024-21126" }, "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2024-21126" ], "id": "GSD-2024-21126", "modified": "2023-12-13T01:21:42.779924Z", "schema_version": "1.4.0" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2024-21126", "STATE": "RESERVED" }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." } ] } } } }
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.