Multiple vulnerabilities in Oracle Enterprise Session Border Controller



Published: 2020-01-22
Risk Medium
Patch available YES
Number of vulnerabilities 2
CVE ID CVE-2018-0734
CVE-2019-11477
CWE ID CWE-200
CWE-190
Exploitation vector Network
Public exploit N/A
Vulnerable software
Subscribe
Oracle Enterprise Session Border Controller
Other software / Other software solutions

Vendor Oracle

Security Advisory

1) Information disclosure

Risk: Low

CVSSv3: 4.8 [CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C] [PCI]

CVE-ID: CVE-2018-0734

CWE-ID: CWE-200 - Information Exposure

Exploit availability: No

Description

The vulnerability allows a local attacker to obtain potentially sensitive information.

The vulnerability exists due to unspecified flaw in Digital Signature Algorithm (DSA). A local attacker can conduct a timing side-channel attack and recover the private key, which could be used to conduct further attacks.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

Oracle Enterprise Session Border Controller: 7.5, 8.0, 8.1, 8.2, 8.3

CPE External links

https://www.oracle.com/security-alerts/cpujan2020.html

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Integer overflow

Risk: Medium

CVSSv3: 6.5 [CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C] [PCI]

CVE-ID: CVE-2019-11477

CWE-ID: CWE-190 - Integer Overflow or Wraparound

Exploit availability: Yes [Search exploit]

Description

The vulnerability allows a remote attacker to perform denial of service (DoS) attack.

The vulnerability exists due to integer overflow when handling TCP Selective Acknowledgments (SACKs) due to incorrect processing of TCP_SKB_CB(skb)->tcp_gso_segs value in Linux kernel. A remote non-authenticated attacker can send specially crafted network traffic to the affected system, trigger integer overflow and render the system unavailable.

Successful exploitation of the vulnerability allows a remote attacker to perform denial of service (DoS) attack.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

Oracle Enterprise Session Border Controller: 7.5, 8.0, 8.1, 8.2, 8.3

CPE External links

https://www.oracle.com/security-alerts/cpujan2020.html

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.