CVE-2014-2473: Medium severity oracle virtualization vulnerability

Published Oct 15, 2014

Updated

Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0 and 5.1 allows remote attackers to affect availability via vectors related to SGD Proxy Server (ttaauxserv) and SGD SSL Daemon (ttassl).

Affected Software

2 affected components

Oracle Virtualization=5.0

Oracle Virtualization=5.1

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html

Event History

Oct 15, 2014

CVE Published

via MITRE·03:15 PM

Data Sourced

via MITRE·03:15 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-2473?

CVE-2014-2473 is categorized as a moderate severity vulnerability affecting the availability of Oracle Secure Global Desktop.

How do I fix CVE-2014-2473?

To mitigate CVE-2014-2473, upgrade Oracle Virtualization to a version that includes the latest security patches released by Oracle.

Which Oracle products are affected by CVE-2014-2473?

CVE-2014-2473 specifically affects Oracle Virtualization versions 5.0 and 5.1.

What kind of attacks can exploit CVE-2014-2473?

CVE-2014-2473 can be exploited by remote attackers targeting the SGD Proxy Server and SGD SSL Daemon to impact system availability.

When was CVE-2014-2473 disclosed?

CVE-2014-2473 was disclosed in October 2014 as part of Oracle's Critical Patch Update.