CVE-2012-3151: Low severity oracle database vulnerability

Published Oct 16, 2012

Updated

Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3, when running on Unix and Linux platforms, allows local users to affect integrity and availability via unknown vectors.

Affected Software

6 affected components

Oracle Database Server=10.2.0.4

Oracle Database Server=10.2.0.5

Oracle Database Server=11.1.0.7

Oracle Database Server=11.2.0.2

Oracle Database Server=11.2.0.3

Linux Linux kernel

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html

Event History

Oct 16, 2012

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2012-3151?

CVE-2012-3151 is classified as a vulnerability that can affect integrity and availability in the affected Oracle Database versions.

Which Oracle Database versions are affected by CVE-2012-3151?

CVE-2012-3151 affects Oracle Database Server versions 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3.

How do I fix CVE-2012-3151?

To remediate CVE-2012-3151, apply the latest security patches provided by Oracle for the affected database versions.

Can CVE-2012-3151 be exploited remotely?

CVE-2012-3151 involves local users and does not appear to be exploitable remotely.

What platforms are affected by CVE-2012-3151?

CVE-2012-3151 affects Oracle Database running on Unix and Linux platforms.