CVE-2014-6567: Buffer Overflow
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information is from the January 2015 CPU. Oracle has not commented on the researcher's claim that this is a stack-based buffer overflow in DBMSAW.EXECUTE, which allows code execution via a long Current Directory Alias (CDA) command.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-6567?
The severity of CVE-2014-6567 is classified as critical due to its potential impact on confidentiality, integrity, and availability.
How do I fix CVE-2014-6567?
To fix CVE-2014-6567, you should apply the latest patches provided by Oracle for the impacted versions of the database server.
Which software versions are affected by CVE-2014-6567?
CVE-2014-6567 affects Oracle Database Server versions 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2.
Who can be affected by CVE-2014-6567?
Remote authenticated users can be affected by CVE-2014-6567 through unspecified vectors.
What type of vulnerability is CVE-2014-6567?
CVE-2014-6567 is an unspecified vulnerability in the Core RDBMS component of Oracle Database Server.