PT-2017-11050 · Oracle · Oracle Outside In Technology+1

Published 2017-10-19 · Updated 2019-10-03 · CVE-2017-10051

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology version 8.5.3.0

Description The issue affects the Oracle Outside In Technology component of Oracle Fusion Middleware, specifically the Outside In Filters subcomponent. It allows a low-privileged attacker with access to the physical communication segment to compromise Oracle Outside In Technology, potentially causing a hang or crash of the system. This can result in a denial of service. The impact depends on how the Outside In Technology code is used by other software, particularly if data is passed directly from a network.

Recommendations For version 8.5.3.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2017-10051

Affected Products

Oracle Fusion Middleware

Oracle Outside In Technology

References · 5

• http://oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-10051 · Security Note
• https://osv.dev/vulnerability/CVE-2017-10051 · Vendor Advisory
• http://securitytracker.com/id/1039602 · Note
• http://securityfocus.com/bid/101377 · Note