CVE-2011-2240
published 2011-07-20CVE-2011-2240: Unspecified vulnerability in the Oracle Universal Installer component in Oracle Database Server 10.1.0.5 allows local users to affect confidentiality via…
PriorityP43low1.7CVSS 2.0
AVLACLAuSCPINAN
EPSS
0.35%
27.9th percentile
Unspecified vulnerability in the Oracle Universal Installer component in Oracle Database Server 10.1.0.5 allows local users to affect confidentiality via unknown vectors.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| oracle | database_server | — | — |
CVSS provenance
nvdv2.01.7LOWAV:L/AC:L/Au:S/C:P/I:N/A:N
vendor_redhat7.2HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-xwc3-j4x2-wgpc: Unspecified vulnerability in the Oracle Universal Installer component in Oracle Database Server 10
ghsa_unreviewed·2022-05-17
CVE-2011-2240 [LOW] GHSA-xwc3-j4x2-wgpc: Unspecified vulnerability in the Oracle Universal Installer component in Oracle Database Server 10
Unspecified vulnerability in the Oracle Universal Installer component in Oracle Database Server 10.1.0.5 allows local users to affect confidentiality via unknown vectors.
Red Hat
kernel: setup_arg_pages: diagnose excessive argument size
vendor_redhat·2010-08-13·CVSS 7.2
CVE-2010-3858 [HIGH] kernel: setup_arg_pages: diagnose excessive argument size
kernel: setup_arg_pages: diagnose excessive argument size
The setup_arg_pages function in fs/exec.c in the Linux kernel before 2.6.36, when CONFIG_STACK_GROWSDOWN is used, does not properly restrict the stack memory consumption of the (1) arguments and (2) environment for a 32-bit application on a 64-bit platform, which allows local users to cause a denial of service (system crash) via a crafted exec system call, a related issue to CVE-2010-2240.
Statement: This issue did not affect the versions of Linux kernel as shipped with Red Hat
Enterprise Linux 4 as they did not backport the upstream commit b6a2fea3 that introduced the issue. This was addressed in Red Hat Enterprise Linux 5 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-0004.html and
https://rhn.redhat.com/
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2011-07-20
Published