CVE-2011-0880 — Inefficient Algorithmic Complexity in Oracle Database Server

CWE-407 — Inefficient Algorithmic Complexity11 documents5 sources
Severity
6.5MEDIUMNVD
NVD6.0CNA6.0
EPSS
0.4%
top 37.47%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Oracle Database Server
Timeline
PublishedJul 20
Latest updateMay 17

Description

Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.1, and 11.2.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2011-0832 and CVE-2011-0835.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 8.0 | Impact: 6.4

Affected Packages1 packages

▶NVDoracle/database_server11.1.0.7, 11.2.0.1, 11.2.0.2+2

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

6
GHSA
GHSA-5hvv-f6h5-f247: Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11↗2022-05-17
▶
GHSA
GHSA-3gv3-r9m2-fqj2: Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11↗2022-05-17
▶
GHSA
GHSA-27q8-895c-wpmq: Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11↗2022-05-17
▶
CVEList
CVE-2011-0832: Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11↗2011-07-20
▶
CVEList
CVE-2011-0835: Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11↗2011-07-20
▶

📋Vendor Advisories

1
Red Hat
xml: xerces-c hash table collisions CPU usage DoS (oCERT-2011-003)↗2014-07-08
▶

💬Community

1
Bugzilla
CVE-2012-0880 xml: xerces-c hash table collisions CPU usage DoS (oCERT-2011-003)↗2012-02-03
▶
CVE-2011-0880 — Inefficient Algorithmic Complexity | cvebase