CVE-2021-2464: High severity oracle utilities vulnerability

Published Sep 24, 2021

Updated

Vulnerability in Oracle Linux (component: OSwatcher). Supported versions that are affected are 7 and 8. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Linux executes to compromise Oracle Linux. Successful attacks of this vulnerability can result in takeover of Oracle Linux. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Affected Software

5 affected components

Oracle Engineered Systems Utilities=12.1.0.2

Oracle Engineered Systems Utilities=19c

Oracle Engineered Systems Utilities=21c

Oracle Linux=7

Oracle Linux=8

Remediation

Patch Available

https://www.oracle.com/security-alerts/cpuapr2022.html

Event History

Sep 24, 2021

CVE Published

via MITRE·06:55 PM

Data Sourced

via MITRE·06:55 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID?

The vulnerability ID is CVE-2021-2464.

What component of Oracle Linux is affected by this vulnerability?

The vulnerability affects the OSwatcher component of Oracle Linux.

Which versions of Oracle Linux are affected by this vulnerability?

The vulnerability affects versions 7 and 8 of Oracle Linux.

What is the severity of CVE-2021-2464?

The severity of CVE-2021-2464 is high with a CVSS score of 7.8.

How can an attacker exploit this vulnerability?

An attacker with low privileges and access to the Oracle Linux infrastructure can exploit this vulnerability.