CVE-2009-1970: Medium severity Oracle Database Server vulnerability

Published Jul 14, 2009

Updated

Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2009-0991.

Affected Software

5 affected components

Oracle Database Server=10.2.0.4

Oracle Database Server=9.2.0.8

Oracle Database Server=9.2.0.8dv

Oracle Database Server=10.1.0.5

Oracle Database Server=11.1.0.7

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html

Event History

Jul 14, 2009

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2009-1970?

CVE-2009-1970 has not been assigned a specific CVSS score, but it is considered to affect the availability of the affected Oracle Database versions.

How do I fix CVE-2009-1970?

To mitigate CVE-2009-1970, it is recommended to apply the latest patches provided by Oracle for the affected database versions.

Which Oracle Database versions are affected by CVE-2009-1970?

CVE-2009-1970 affects Oracle Database versions 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7.

Can CVE-2009-1970 be exploited remotely?

Yes, CVE-2009-1970 can be exploited by remote attackers affecting the availability of the Oracle Database.

Is CVE-2009-1970 related to any other vulnerabilities?

CVE-2009-1970 is a different vulnerability than CVE-2009-0991, although both affect the Oracle Database.