CVE-2014-2476: Medium severity oracle virtualization vulnerability

Published Oct 15, 2014

Updated

Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0 and 5.1 allows remote attackers to affect availability via vectors related to SGD Proxy Server (ttaauxserv), a different vulnerability than CVE-2014-2472, CVE-2014-2474, and CVE-2014-6459.

Affected Software

2 affected components

Oracle Virtualization=5.0

Oracle Virtualization=5.1

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html

Event History

Oct 15, 2014

CVE Published

via MITRE·03:15 PM

Data Sourced

via MITRE·03:15 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-2476?

CVE-2014-2476 has been classified with a severity that allows remote attackers to affect the availability of the Oracle Secure Global Desktop component.

How do I fix CVE-2014-2476?

To fix CVE-2014-2476, you should apply the latest security patches provided by Oracle for versions 5.0 and 5.1 of Oracle Virtualization.

What components are affected by CVE-2014-2476?

CVE-2014-2476 affects the Oracle Secure Global Desktop component specifically in Oracle Virtualization versions 5.0 and 5.1.

Can CVE-2014-2476 be exploited remotely?

Yes, CVE-2014-2476 can be exploited by remote attackers, impacting the availability of the affected systems.

Are there any mitigations for CVE-2014-2476?

While applying patches is the primary mitigation for CVE-2014-2476, network controls and monitoring can also help mitigate the risk of exploitation.