CVE-2008-2607

3 documents3 sources
Severity
6.5MEDIUM
EPSS
4.1%
top 11.45%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Oracle Database 9IOracle Database Server
Timeline
PublishedJul 15
Latest updateMay 1

Description

Unspecified vulnerability in the Advanced Queuing component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.6 has unknown impact and remote authenticated attack vectors related to SYS.DBMS_AQELM. NOTE: the previous information was obtained from the Oracle July 2008 CPU. Oracle has not commented on reliable researcher claims that this issue is a buffer overflow that allows attackers to cause a denial of service (database corruption) and possibly execute arbitrary code via a …

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 8.0 | Impact: 6.4

Affected Packages2 packages

▶NVDoracle/database_9i9.2.0.8
▶NVDoracle/database_server10.1.0.5, 10.2.0.4, 11.1.0.6+2

🔴Vulnerability Details

2
GHSA
GHSA-hjq3-j9hq-m46w: Unspecified vulnerability in the Advanced Queuing component in Oracle Database 9↗2022-05-01
▶
CVEList
CVE-2008-2607: Unspecified vulnerability in the Advanced Queuing component in Oracle Database 9↗2008-07-15
▶
CVE-2008-2607 (MEDIUM CVSS 6.5) | Unspecified vulnerability in the Ad | cvebase.io