CVE-2019-2749
First published: Tue Jul 23 2019(Updated: )
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult to exploit vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with network access via multiple protocols to compromise Java VM. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java VM accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Java VM. CVSS 3.0 Base Score 6.8 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H).
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Database Server | =11.2.0.4 | |
| Oracle Database Server | =12.1.0.2 | |
| Oracle Database Server | =12.2.0.1 | |
| Oracle Database Server | =18c | |
| Oracle Database Server | =19c |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2019-2749?
The severity of CVE-2019-2749 is medium.
Which versions of Oracle Database Server are affected by CVE-2019-2749?
Oracle Database Server versions 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, and 19c are affected by CVE-2019-2749.
What privileges does an attacker need to exploit CVE-2019-2749?
An attacker needs the Create Session and Create Procedure privileges with network access to exploit CVE-2019-2749.
Is CVE-2019-2749 difficult to exploit?
Yes, CVE-2019-2749 is a difficult to exploit vulnerability.
Where can I find more information about CVE-2019-2749?
More information about CVE-2019-2749 can be found on the Oracle website: [http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html](http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html)
- collector/nvd-index
- agent/severity
- agent/references
- agent/author
- agent/tags
- agent/event
- agent/type
- agent/description
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/oracle
- canonical/oracle database server
- version/oracle database server/11.2.0.4
- version/oracle database server/12.1.0.2
- version/oracle database server/12.2.0.1
- version/oracle database server/18c
- version/oracle database server/19c