Main Vulnerability Database Vulnerabilities #VU65646

Input validation error in Oracle Database Server - CVE-2017-10321

Published: July 21, 2022

Vulnerability identifier: #VU65646

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-10321

CWE-ID: CWE-20

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to compromise Core RDBMS.

The vulnerability exists in the Core RDBMS component of Oracle Database Server. A local user with Create session privileges can pass specially crafted input to the application and compromise Core RDBMS.

Affected software

Oracle Database Server
IBM Security Verify Information Queue

How to mitigate CVE-2017-10321

Install updates from vendor's website.

IBM Security Verify Information Queue - update to 10.0.3

External References

Related Security Bulletins