VDB
BDU%3A2020-00689
BDU%3A2020-00689
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость компонента ASN.1 библиотеки Bouncy Castle Crypto, связанная с выделением неограниченной памяти, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle Corp., Legion of the Bouncy Castle Inc. | Business Process Management Suite, PeopleSoft Enterprise PeopleTools, Managed File Transfer, WebCenter Portal, WebLogic Server, Oracle Hospitality Guest Access, Retail Xstore Point of Service, Bouncy Castle, Financial Services Analytical Applications Infrastructure, Oracle FLEXCUBE Private Banking, Oracle Communications Convergence, Oracle Communications Session Route Manager, Communications Diameter Signaling Router, Oracle Data Integrator |
Timeline
- Feb 24, 2020 CVE Published
- Feb 25, 2021 CVE Updated
References
- https://nvd.nist.gov/vuln/detail/CVE-2019-17359 url
- https://www.oracle.com/security-alerts/cpuoct2020.html url
- https://www.oracle.com/security-alerts/cpujan2021.html url
- https://www.oracle.com/security-alerts/public-vuln-to-advisory-mapping.html advisory
- https://www.oracle.com/security-alerts/cpujul2020.html advisory
- https://www.oracle.com/security-alerts/cpuapr2020.html advisory
- https://www.bouncycastle.org/latest_releases.html advisory