Home

CVE-2020-2512

Description

Vulnerability in the Database Gateway for ODBC component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via OracleNet to compromise Database Gateway for ODBC. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Database Gateway for ODBC. CVSS 3.0 Base Score 5.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H).

Risk Information

Base Score
5.9
MODERATE
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
1.622

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities are affected in Oracle 11.2.0.4Windows
Multiple Vulnerabilities are affected in Oracle 12.1.0.2Windows
Multiple Vulnerabilities are affected in Oracle 12.2.0.1Windows
Multiple Vulnerabilities are affected in Oracle 18cWindows
Multiple Vulnerabilities are affected in Oracle 19cWindows
Multiple Vulnerabilities are affected in Oracle Database Server 19cWindows
Multiple Vulnerabilities are affected in Oracle Database Server 11.2.0.4Windows
Multiple Vulnerabilities are affected in Oracle Database Server 12.1.0.2Windows
Multiple Vulnerabilities are affected in Oracle Database Server 12.2.0.1Windows
Multiple Vulnerabilities are affected in Oracle Database Server 18cWindows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234