Improper input validation in Oracle Database Server - CVE-2024-0397

Vulnerability identifier: #VU94533

CSH Severity: Low

CVSS v4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-0397

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote authenticated user to perform service disruption.

The vulnerability exists due to improper input validation within the OML4Py (Python) in Oracle Database Server. A remote authenticated user can exploit this vulnerability to perform service disruption.

Oracle Database Server
IBM InfoSphere Information Server
Debian Linux
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Software Development Kit 12
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Manager Proxy Module
SUSE Manager Server Module
SUSE Manager Client Tools for SLE Micro
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
openSUSE Leap Micro
SUSE Linux Micro
SUSE Enterprise Storage
IBM AIX
SUSE Manager Client Tools for RHEL, Liberty and Clones
SUSE Manager Client Tools for Debian
SUSE Manager Client Tools for SLE
SUSE Linux Enterprise Server for the Raspberry Pi
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Server 15 SP3 LTSS
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Server 15 SP4 LTSS
SUSE Linux Enterprise Desktop 15 SP4 LTSS
Legacy Module
Basesystem Module
Development Tools Module
Python 3 Module
openSUSE Leap
Ubuntu
Anolis OS
openEuler
Fedora
SUSE Manager Client Tools for Ubuntu 20.04
SUSE Manager Client Tools for Ubuntu 22.04
IBM VIOS
python36-base-debuginfo
libpython3_6m1_0-32bit
libpython3_6m1_0-debuginfo-32bit
python36-base
python36
python36-debugsource
libpython3_6m1_0
python36-debuginfo
libpython3_6m1_0-debuginfo
python36-devel
python3-base
python3
python3-core-debugsource
python3-debuginfo
python3-base-debuginfo
python3-debugsource
python3-tools
python3-devel
libpython3_6m1_0-64bit-debuginfo
python3-testsuite
python3-devel-debuginfo
python3-doc-devhelp
libpython3_6m1_0-64bit
python3-testsuite-debuginfo
python3-doc
libpython3_6m1_0-32bit-debuginfo
python3-curses
python3-dbm-debuginfo
python3-curses-debuginfo
python3-tk-debuginfo
python3-idle
python3-tk
python3-dbm
python3.8 (Ubuntu package)
python3.8-minimal (Ubuntu package)
python39-debuginfo
python39-base-32bit-debuginfo
python39-base-debuginfo
python39-curses-debuginfo
python39-testsuite-debuginfo
python39-dbm
python39-tools
python39-testsuite
libpython3_9-1_0
python39-doc-devhelp
python39-devel
libpython3_9-1_0-debuginfo
python39-base
python39-idle
python39-core-debugsource
python39
python39-tk-debuginfo
python39-32bit-debuginfo
libpython3_9-1_0-32bit
libpython3_9-1_0-32bit-debuginfo
python39-base-64bit
python39-base-64bit-debuginfo
python39-64bit
libpython3_9-1_0-64bit
libpython3_9-1_0-64bit-debuginfo
python39-64bit-debuginfo
python39-base-32bit
python39-32bit
python39-doc
python39-curses
python39-dbm-debuginfo
python39-debugsource
python39-tk
python3.9
python3.10-minimal (Ubuntu package)
python3.10 (Ubuntu package)
python3.11 (Debian package)
python3-tkinter
python3-debug
python3-libs
python3-test
python-unversioned-command
python3-unversioned-command
python3-help
mingw-python3
python311-base
python311-tk
python311-testsuite
python311-doc-devhelp
python311-debugsource
python311-curses-debuginfo
python311-dbm-debuginfo
python311-tools
python311-tk-debuginfo
python311-dbm
libpython3_11-1_0
python311-doc
python311-testsuite-debuginfo
libpython3_11-1_0-debuginfo
python311-base-debuginfo
python311-32bit
python311-base-32bit
python311-32bit-debuginfo
libpython3_11-1_0-32bit
python311-base-32bit-debuginfo
libpython3_11-1_0-32bit-debuginfo
libpython3_11-1_0-64bit-debuginfo
python311-debuginfo
python311-base-64bit
python311-64bit
libpython3_11-1_0-64bit
python311-base-64bit-debuginfo
python311-64bit-debuginfo
python311
python311-idle
python311-devel
python311-core-debugsource
python311-curses
python312-devel
python312-testsuite-debuginfo
python312-32bit
libpython3_12-1_0-32bit
python312-tk-debuginfo
python312-doc-devhelp
python312-base-debuginfo
python312-curses-debuginfo
python312-core-debugsource
python312-curses
python312-tk
python312-doc
python312-debugsource
python312-64bit-debuginfo
libpython3_12-1_0
python312-testsuite
python312
python312-debuginfo
python312-dbm
python312-tools
python312-idle
python312-base
libpython3_12-1_0-debuginfo
python312-dbm-debuginfo
python312-base-32bit-debuginfo
python312-base-32bit
libpython3_12-1_0-32bit-debuginfo
libpython3_12-1_0-64bit-debuginfo
python312-base-64bit
python312-64bit
libpython3_12-1_0-64bit
python312-base-64bit-debuginfo
python312-32bit-debuginfo
venv-salt-minion
OpenManage Network Integration (OMNI)
SmartFabric OS10
Dell Enterprise SONiC Distribution
Dell Secure Connect Gateway
IBM InfoSphere Information Server for Cloud
IBM CICS TX Advanced

Install updates from vendor's website.

python36-base-debuginfo - update to 3.6.15-58.1
libpython3_6m1_0-32bit - addressed in versions 3.6.15-58.1, 3.6.15-150300.10.65.1
libpython3_6m1_0-debuginfo-32bit - update to 3.6.15-58.1
python36-base - update to 3.6.15-58.1
python36 - update to 3.6.15-58.1
python36-debugsource - update to 3.6.15-58.1
libpython3_6m1_0 - addressed in versions 3.6.15-58.1, 3.6.15-150000.3.150.1, 3.6.15-150300.10.65.1
python36-debuginfo - update to 3.6.15-58.1
libpython3_6m1_0-debuginfo - addressed in versions 3.6.15-58.1, 3.6.15-150000.3.150.1, 3.6.15-150300.10.65.1
python36-devel - update to 3.6.15-58.1
python3-base - addressed in versions 3.6.15-150000.3.150.1, 3.6.15-150300.10.65.1
python3 - addressed in versions 3.6.15-150000.3.150.1, 3.6.15-150300.10.65.2
python3-core-debugsource - addressed in versions 3.6.15-150000.3.150.1, 3.6.15-150300.10.65.1
python3-debuginfo - addressed in versions 3.6.15-150000.3.150.1, 3.6.15-150300.10.65.2
python3-base-debuginfo - addressed in versions 3.6.15-150000.3.150.1, 3.6.15-150300.10.65.1
python3-debugsource - addressed in versions 3.6.15-150000.3.150.1, 3.6.15-150300.10.65.2
python3-tools - update to 3.6.15-150300.10.65.1
python3-devel - update to 3.6.15-150300.10.65.1
libpython3_6m1_0-64bit-debuginfo - update to 3.6.15-150300.10.65.1
python3-testsuite - update to 3.6.15-150300.10.65.1
python3-devel-debuginfo - update to 3.6.15-150300.10.65.1
python3-doc-devhelp - update to 3.6.15-150300.10.65.1
libpython3_6m1_0-64bit - update to 3.6.15-150300.10.65.1
python3-testsuite-debuginfo - update to 3.6.15-150300.10.65.1
python3-doc - update to 3.6.15-150300.10.65.1
libpython3_6m1_0-32bit-debuginfo - update to 3.6.15-150300.10.65.1
python3-curses - update to 3.6.15-150300.10.65.2
python3-dbm-debuginfo - update to 3.6.15-150300.10.65.2
python3-curses-debuginfo - update to 3.6.15-150300.10.65.2
python3-tk-debuginfo - update to 3.6.15-150300.10.65.2
python3-idle - update to 3.6.15-150300.10.65.2
python3-tk - update to 3.6.15-150300.10.65.2
python3-dbm - update to 3.6.15-150300.10.65.2
OpenManage Network Integration (OMNI) - update to 3.7
python3.8 (Ubuntu package) - update to 3.8.10-0ubuntu1~20.04.11
python3.8-minimal (Ubuntu package) - update to 3.8.10-0ubuntu1~20.04.11
python39-debuginfo - update to 3.9.19-150300.4.46.1
python39-base-32bit-debuginfo - update to 3.9.19-150300.4.46.1
python39-base-debuginfo - update to 3.9.19-150300.4.46.1
python39-curses-debuginfo - update to 3.9.19-150300.4.46.1
python39-testsuite-debuginfo - update to 3.9.19-150300.4.46.1
python39-dbm - update to 3.9.19-150300.4.46.1
python39-tools - update to 3.9.19-150300.4.46.1
python39-testsuite - update to 3.9.19-150300.4.46.1
libpython3_9-1_0 - update to 3.9.19-150300.4.46.1
python39-doc-devhelp - update to 3.9.19-150300.4.46.1
python39-devel - update to 3.9.19-150300.4.46.1
libpython3_9-1_0-debuginfo - update to 3.9.19-150300.4.46.1
python39-base - update to 3.9.19-150300.4.46.1
python39-idle - update to 3.9.19-150300.4.46.1
python39-core-debugsource - update to 3.9.19-150300.4.46.1
python39 - update to 3.9.19-150300.4.46.1
python39-tk-debuginfo - update to 3.9.19-150300.4.46.1
python39-32bit-debuginfo - update to 3.9.19-150300.4.46.1
libpython3_9-1_0-32bit - update to 3.9.19-150300.4.46.1
libpython3_9-1_0-32bit-debuginfo - update to 3.9.19-150300.4.46.1
python39-base-64bit - update to 3.9.19-150300.4.46.1
python39-base-64bit-debuginfo - update to 3.9.19-150300.4.46.1
python39-64bit - update to 3.9.19-150300.4.46.1
libpython3_9-1_0-64bit - update to 3.9.19-150300.4.46.1
libpython3_9-1_0-64bit-debuginfo - update to 3.9.19-150300.4.46.1
python39-64bit-debuginfo - update to 3.9.19-150300.4.46.1
python39-base-32bit - update to 3.9.19-150300.4.46.1
python39-32bit - update to 3.9.19-150300.4.46.1
python39-doc - update to 3.9.19-150300.4.46.1
python39-curses - update to 3.9.19-150300.4.46.1
python39-dbm-debuginfo - update to 3.9.19-150300.4.46.1
python39-debugsource - update to 3.9.19-150300.4.46.1
python39-tk - update to 3.9.19-150300.4.46.1
python3.9 - addressed in versions 3.9.20-1.fc39, 3.9.20-1.fc40, 3.9.20-1.fc41
python3.10-minimal (Ubuntu package) - update to 3.10.12-1~22.04.5
python3.10 (Ubuntu package) - update to 3.10.12-1~22.04.5
python3.11 (Debian package) - update to 3.11.2-6+deb12u3
python3-tkinter - update to 3.11.6-4
python3 - update to 3.11.6-4
python3-devel - update to 3.11.6-4
python3-debuginfo - update to 3.11.6-4
python3 - addressed in versions 3.11.6-4, 3.11.6-6
python3-debug - addressed in versions 3.11.6-4, 3.11.6-6
python3-devel - addressed in versions 3.11.6-4, 3.11.6-6
python3-idle - addressed in versions 3.11.6-4, 3.11.6-6
python3-libs - addressed in versions 3.11.6-4, 3.11.6-6
python3-test - addressed in versions 3.11.6-4, 3.11.6-6
python3-tkinter - addressed in versions 3.11.6-4, 3.11.6-6
python-unversioned-command - addressed in versions 3.11.6-4, 3.11.6-6
python3-unversioned-command - update to 3.11.6-4
python3-debugsource - update to 3.11.6-4
python3-debug - update to 3.11.6-4
python3-help - update to 3.11.6-4
mingw-python3 - addressed in versions 3.11.9-1.fc39, 3.11.9-1.fc40, 3.11.9-2.fc39, 3.11.9-2.fc40
python311-base - addressed in versions 3.11.9-150600.3.3.1, 3.11.12-slfo.1.1_1.1
python311-tk - update to 3.11.9-150600.3.3.1
python311-testsuite - update to 3.11.9-150600.3.3.1
python311-doc-devhelp - update to 3.11.9-150600.3.3.1
python311-debugsource - addressed in versions 3.11.9-150600.3.3.1, 3.11.12-slfo.1.1_1.1
python311-curses-debuginfo - addressed in versions 3.11.9-150600.3.3.1, 3.11.12-slfo.1.1_1.1
python311-dbm-debuginfo - update to 3.11.9-150600.3.3.1
python311-tools - update to 3.11.9-150600.3.3.1
python311-tk-debuginfo - update to 3.11.9-150600.3.3.1
python311-dbm - update to 3.11.9-150600.3.3.1
libpython3_11-1_0 - addressed in versions 3.11.9-150600.3.3.1, 3.11.12-slfo.1.1_1.1
python311-doc - update to 3.11.9-150600.3.3.1
python311-testsuite-debuginfo - update to 3.11.9-150600.3.3.1
libpython3_11-1_0-debuginfo - addressed in versions 3.11.9-150600.3.3.1, 3.11.12-slfo.1.1_1.1
python311-base-debuginfo - addressed in versions 3.11.9-150600.3.3.1, 3.11.12-slfo.1.1_1.1
python311-32bit - update to 3.11.9-150600.3.3.1
python311-base-32bit - update to 3.11.9-150600.3.3.1
python311-32bit-debuginfo - update to 3.11.9-150600.3.3.1
libpython3_11-1_0-32bit - update to 3.11.9-150600.3.3.1
python311-base-32bit-debuginfo - update to 3.11.9-150600.3.3.1
libpython3_11-1_0-32bit-debuginfo - update to 3.11.9-150600.3.3.1
libpython3_11-1_0-64bit-debuginfo - update to 3.11.9-150600.3.3.1
python311-debuginfo - addressed in versions 3.11.9-150600.3.3.1, 3.11.12-slfo.1.1_1.1
python311-base-64bit - update to 3.11.9-150600.3.3.1
python311-64bit - update to 3.11.9-150600.3.3.1
libpython3_11-1_0-64bit - update to 3.11.9-150600.3.3.1
python311-base-64bit-debuginfo - update to 3.11.9-150600.3.3.1
python311-64bit-debuginfo - update to 3.11.9-150600.3.3.1
python311 - addressed in versions 3.11.9-150600.3.3.1, 3.11.12-slfo.1.1_1.1
python311-idle - update to 3.11.9-150600.3.3.1
python311-devel - update to 3.11.9-150600.3.3.1
python311-core-debugsource - addressed in versions 3.11.9-150600.3.3.1, 3.11.12-slfo.1.1_1.1
python311-curses - addressed in versions 3.11.9-150600.3.3.1, 3.11.12-slfo.1.1_1.1
python312-devel - update to 3.12.4-150600.3.3.1
python312-testsuite-debuginfo - update to 3.12.4-150600.3.3.1
python312-32bit - update to 3.12.4-150600.3.3.1
libpython3_12-1_0-32bit - update to 3.12.4-150600.3.3.1
python312-tk-debuginfo - update to 3.12.4-150600.3.3.1
python312-doc-devhelp - update to 3.12.4-150600.3.3.1
python312-base-debuginfo - update to 3.12.4-150600.3.3.1
python312-curses-debuginfo - update to 3.12.4-150600.3.3.1
python312-core-debugsource - update to 3.12.4-150600.3.3.1
python312-curses - update to 3.12.4-150600.3.3.1
python312-tk - update to 3.12.4-150600.3.3.1
python312-doc - update to 3.12.4-150600.3.3.1
python312-debugsource - update to 3.12.4-150600.3.3.1
python312-64bit-debuginfo - update to 3.12.4-150600.3.3.1
libpython3_12-1_0 - update to 3.12.4-150600.3.3.1
python312-testsuite - update to 3.12.4-150600.3.3.1
python312 - update to 3.12.4-150600.3.3.1
python312-debuginfo - update to 3.12.4-150600.3.3.1
python312-dbm - update to 3.12.4-150600.3.3.1
python312-tools - update to 3.12.4-150600.3.3.1
python312-idle - update to 3.12.4-150600.3.3.1
python312-base - update to 3.12.4-150600.3.3.1
libpython3_12-1_0-debuginfo - update to 3.12.4-150600.3.3.1
python312-dbm-debuginfo - update to 3.12.4-150600.3.3.1
python312-base-32bit-debuginfo - update to 3.12.4-150600.3.3.1
python312-base-32bit - update to 3.12.4-150600.3.3.1
libpython3_12-1_0-32bit-debuginfo - update to 3.12.4-150600.3.3.1
libpython3_12-1_0-64bit-debuginfo - update to 3.12.4-150600.3.3.1
python312-base-64bit - update to 3.12.4-150600.3.3.1
python312-64bit - update to 3.12.4-150600.3.3.1
libpython3_12-1_0-64bit - update to 3.12.4-150600.3.3.1
python312-base-64bit-debuginfo - update to 3.12.4-150600.3.3.1
python312-32bit-debuginfo - update to 3.12.4-150600.3.3.1
Dell Enterprise SONiC Distribution - update to 4.4.2
Dell Secure Connect Gateway - update to 5.26.00.18
IBM CICS TX Advanced - update to 10.1.0.0 ifix32
SmartFabric OS10 - addressed in versions 10.5.4.15, 10.5.5.14, 10.5.6.9
IBM InfoSphere Information Server - update to 11.7.1 Fix Pack 6
IBM InfoSphere Information Server for Cloud - update to 11.7.1 Fix Pack 6
venv-salt-minion - addressed in versions 3006.0-1.47.1, 3006.0-2.23.1, 3006.0-2.54.3, 3006.0-2.61.1, 3006.0-2.63.3, 3006.0-3.65.1, 3006.0-150000.3.67.1

• https://www.oracle.com/security-alerts/cpujul2024.html

• Multiple vulnerabilities in Oracle Database Server
• Ubuntu update for python3.10
• SUSE update for python39
• SUSE update for python39
• SUSE update for python39
• SUSE update for python3
• openEuler 24.03 LTS update for python3
• Fedora 39 update for mingw-python3
• Fedora 40 update for mingw-python3
• Debian update for python3.11
• Fedora 40 update for mingw-python3
• Fedora 39 update for mingw-python3
• SUSE update for python312
• Fedora 41 update for python3.9
• Fedora 40 update for python3.9
• Fedora 39 update for python3.9
• SUSE update for python311
• Multiple vulnerabilities in IBM AIX and IBM VIOS
• Multiple vulnerabilities in IBM CICS TX Advanced
• SUSE update for SUSE Manager Salt Bundle
• SUSE update for SUSE Manager Salt Bundle
• SUSE update for SUSE Manager Salt Bundle
• SUSE update for SUSE Manager Salt Bundle
• SUSE update for SUSE Manager Salt Bundle
• SUSE update for SUSE Manager Salt Bundle
• SUSE update for SUSE Manager Salt Bundle
• Multiple vulnerabilities in Dell OpenManage Network Integration (OMNI)
• Multiple vulnerabilities in Dell Secure Connect Gateway
• Multiple vulnerabilities in Dell SmartFabric OS10
• Dell SmartFabric OS10 update for third-party components
• Multiple vulnerabilities in Dell Enterprise SONiC Distribution
• Dell Networking OS10 update for third-party components
• Anolis OS update for python3.11
• SUSE update for python311
• Anolis OS update for python3.11
• Multiple vulnerabilities in IBM InfoSphere Information Server