SB2020012015 - Multiple vulnerabilities in Oracle Database Server
Published: January 20, 2020 Updated: March 7, 2025
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 16 secuirty vulnerabilities.
1) Improper input validation (CVE-ID: CVE-2020-2511)
The vulnerability allows a remote authenticated user to a crash the entire system.
The vulnerability exists due to improper input validation within the Core RDBMS in Oracle Database Server. A remote authenticated user can exploit this vulnerability to a crash the entire system.
2) SQL injection (CVE-ID: CVE-2020-2510)
The vulnerability allows a remote user to execute arbitrary SQL queries in database.
The vulnerability exists due to insufficient sanitization of user-supplied data within the Core RDBMS in Oracle Database Server. A remote user can send a specially crafted request to the affected application and execute arbitrary SQL commands.
3) Improper input validation (CVE-ID: CVE-2020-2518)
The vulnerability allows a remote authenticated user to execute arbitrary code.
The vulnerability exists due to improper input validation within the Java VM in Oracle Database Server. A remote authenticated user can exploit this vulnerability to execute arbitrary code.
4) Improper input validation (CVE-ID: CVE-2020-2512)
The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to improper input validation within the Database Gateway for ODBC in Oracle Database Server. A remote non-authenticated attacker can exploit this vulnerability to perform a denial of service (DoS) attack.
5) Improper input validation (CVE-ID: CVE-2020-2515)
The vulnerability allows a remote authenticated user to read and manipulate data.
The vulnerability exists due to improper input validation within the Database Gateway for ODBC in Oracle Database Server. A remote authenticated user can exploit this vulnerability to read and manipulate data.
6) Improper input validation (CVE-ID: CVE-2020-2527)
The vulnerability allows a remote privileged user to gain access to sensitive information.
The vulnerability exists due to improper input validation within the Core RDBMS in Oracle Database Server. A remote privileged user can exploit this vulnerability to gain access to sensitive information.
7) Improper input validation (CVE-ID: CVE-2020-2731)
The vulnerability allows a local authenticated user to manipulate or delete data.
The vulnerability exists due to improper input validation within the Core RDBMS in Oracle Database Server. A local authenticated user can exploit this vulnerability to manipulate or delete data.
8) Improper input validation (CVE-ID: CVE-2020-2568)
The vulnerability allows a local authenticated user to manipulate or delete data.
The vulnerability exists due to improper input validation within the Oracle Applications DBA in Oracle Database Server. A local authenticated user can exploit this vulnerability to manipulate or delete data.
9) Improper input validation (CVE-ID: CVE-2020-2569)
The vulnerability allows a local authenticated user to manipulate or delete data.
The vulnerability exists due to improper input validation within the Oracle Applications DBA in Oracle Database Server. A local authenticated user can exploit this vulnerability to manipulate or delete data.
10) Heap-based buffer overflow (CVE-ID: CVE-2020-2517)
The vulnerability allows a remote user to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error within the Database Gateway for ODBC in Oracle Database Server. A remote user can pass specially crafted data to the application, trigger heap-based buffer overflow and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
11) Improper input validation (CVE-ID: CVE-2020-2516)
The vulnerability allows a remote privileged user to manipulate data.
The vulnerability exists due to improper input validation within the Core RDBMS in Oracle Database Server. A remote privileged user can exploit this vulnerability to manipulate data.
12) OS Command Injection (CVE-ID: CVE-2019-0232)
The vulnerability allows a remote attacker to execute arbitrary commands on the target system.
The vulnerability exists due to an input validation error within the CGI Servlet when passing arguments from JRE to the Windows environment. A remote attacker can send a specially crafted request to the CGI Servlet, inject and execute arbitrary OS commands on the system with Apache Tomcat privileges.
Successful exploitation of the vulnerability requires that Apache Tomcat is installed on Windows operating system with enabled option “enableCmdLineArguments” (CGI Servlet and “enableCmdLineArguments” option are disabled by default).
13) Cross-site scripting (CVE-ID: CVE-2019-0221)
The disclosed vulnerability allows a remote attacker to perform cross-site scripting (XSS) attacks.
The vulnerability exists due to insufficient sanitization of user-supplied data within SSI printenv command, when parsing URI. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's browser in context of vulnerable website.
Successful exploitation of this vulnerability may allow a remote attacker to steal potentially sensitive information, change appearance of the web page, perform phishing and drive-by-download attacks.
Example:
http://[host]/printenv.shtml?%3Cscript%3Ealert(%27xss%27)%3C/script%3E
14) Resource exhaustion (CVE-ID: CVE-2019-0199)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists within the HTTP/2 implementation in Apache Tomcat that accepts streams with excessive numbers of SETTINGS frames and also permits clients to keep streams open without reading/writing request/response data. A remote attacker can exhaust all available threads on the server and perform denial of service attack.
15) Open redirect (CVE-ID: CVE-2018-11784)
The vulnerability allows a remote attacker to redirect victims to arbitrary URI.
The vulnerability exists due to improper sanitization of user-supplied data. A remote attacker can create a link that leads to a trusted website, however, when clicked, redirects the victim to arbitrary URI.
Successful exploitation of this vulnerability may allow a remote attacker to perform a phishing attack and steal potentially sensitive information.
16) Resource management error (CVE-ID: CVE-2019-10072)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to incomplete fix for SB2019020812 when processing HTTP/2 requests. A remote attacker can perform denial of service attack by not sending WINDOW_UPDATE messages for the connection window (stream 0).
Remediation
Install update from vendor's website.