CVE

Id
73867  
CVE No.
CVE-2014-6567  
Status
Candidate  
Description
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information is from the January 2015 CPU. Oracle has not commented on the researcher"s claim that this is a stack-based buffer overflow in DBMS_AW.EXECUTE, which allows code execution via a long Current Directory Alias (CDA) command.  
Phase
Assigned (20140917)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
691818 73867 CVE-2014-6567 MISC:http://www.databaseforensics.com/Oracle_Jan2015_CPU.pdf  View
691819 73867 CVE-2014-6567 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html  View
691820 73867 CVE-2014-6567 BID:72134  View
691821 73867 CVE-2014-6567 URL:http://www.securityfocus.com/bid/72134  View
691822 73867 CVE-2014-6567 SECTRACK:1031572  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
5804 JVNDB-2015-001124 Oracle Sun Solaris における Network に関する脆弱性 Oracle Sun Solaris には、Network に関する処理に不備があるため、可用性に影響のある脆弱性が存在します。 CVE-2014-6575 73867 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001124.html  View