CVE-2014-2475: Medium severity oracle virtualization vulnerability

Published Oct 15, 2014

Updated

Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 4.63, 4.71, 5.0, and 5.1 allows remote attackers to affect availability via vectors related to SGD Proxy Server (ttaauxserv).

Affected Software

4 affected components

Oracle Virtualization=4.63

Oracle Virtualization=4.71

Oracle Virtualization=5.0

Oracle Virtualization=5.1

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html

Event History

Oct 15, 2014

CVE Published

via MITRE·03:15 PM

Data Sourced

via MITRE·03:15 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-2475?

CVE-2014-2475 has been assigned a medium severity rating due to its potential to affect availability when exploited.

How do I fix CVE-2014-2475?

To fix CVE-2014-2475, it is recommended to apply the latest security patches provided by Oracle for affected versions of Oracle Virtualization.

Which versions are affected by CVE-2014-2475?

CVE-2014-2475 affects Oracle Virtualization versions 4.63, 4.71, 5.0, and 5.1.

What are the potential impacts of CVE-2014-2475?

The potential impacts of CVE-2014-2475 include disruption of availability due to exploitation via the SGD Proxy Server.

Can CVE-2014-2475 be exploited remotely?

Yes, CVE-2014-2475 can be exploited remotely by attackers to affect the availability of the service.