CVE-2014-6567: Buffer Overflow
First published: Wed Jan 21 2015(Updated: )
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information is from the January 2015 CPU. Oracle has not commented on the researcher's claim that this is a stack-based buffer overflow in DBMS_AW.EXECUTE, which allows code execution via a long Current Directory Alias (CDA) command.
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Database | =11.1.0.7 | |
| Oracle Database | =11.2.0.3 | |
| Oracle Database | =11.2.0.4 | |
| Oracle Database | =12.1.0.1 | |
| Oracle Database | =12.1.0.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2014-6567?
The severity of CVE-2014-6567 is classified as critical due to its potential impact on confidentiality, integrity, and availability.
How do I fix CVE-2014-6567?
To fix CVE-2014-6567, you should apply the latest patches provided by Oracle for the impacted versions of the database server.
Which software versions are affected by CVE-2014-6567?
CVE-2014-6567 affects Oracle Database Server versions 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2.
Who can be affected by CVE-2014-6567?
Remote authenticated users can be affected by CVE-2014-6567 through unspecified vectors.
What type of vulnerability is CVE-2014-6567?
CVE-2014-6567 is an unspecified vulnerability in the Core RDBMS component of Oracle Database Server.
- agent/references
- agent/type
- agent/softwarecombine
- agent/remedy
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/oracle
- canonical/oracle database
- version/oracle database/11.1.0.7
- version/oracle database/11.2.0.3
- version/oracle database/11.2.0.4
- version/oracle database/12.1.0.1
- version/oracle database/12.1.0.2