PT-2023-13725 · Oracle · Oracle Database Server+1

CVE-2022-39429

·

Publicado

2023-01-17

·

Atualizado

2023-01-24

CVSS v3.1

4.3

Média

VetorAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 19c and 21c
Description The issue affects the Java VM component, allowing a low-privileged attacker with Create Procedure privilege and network access via Oracle Net to compromise the Java VM. This can result in a partial denial of service (DOS) of the Java VM.
Recommendations For versions 19c and 21c, update to a version that includes the fix for this issue to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Identificadores relacionados

CVE-2022-39429

Produtos afetados

Oracle Database
Oracle Database Server