CVE-2014-0377: Medium severity Oracle Database Server vulnerability

Published Jan 15, 2014

Updated

Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality via vectors related to SYS tables.

Affected Software

4 affected components

Oracle Database Server=11.1.0.7

Oracle Database Server=11.2.0.3

Oracle Database Server=11.2.0.4

Oracle Database Server=12.1.0.1

Event History

Jan 15, 2014

CVE Published

via MITRE·01:33 AM

Data Sourced

via MITRE·01:33 AM

Description

Data Sourced

via NVD·04:08 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2014-0377?

CVE-2014-0377 is considered a vulnerability that allows unauthorized access affecting confidentiality for authenticated users.

How do I fix CVE-2014-0377?

To remediate CVE-2014-0377, upgrade to a patched version of Oracle Database Server that addresses the vulnerability.

What versions of Oracle are affected by CVE-2014-0377?

CVE-2014-0377 affects Oracle Database Server versions 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1.

Can CVE-2014-0377 be exploited remotely?

Yes, CVE-2014-0377 can be exploited by remote authenticated users to impact confidentiality.

Is a workaround available for CVE-2014-0377?

There are no specific workarounds documented for CVE-2014-0377; applying the security update is recommended.