CVE-2019-17359 in Data Integratorinfo

Summary

The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory allocation, and resultant OutOfMemoryError error, via crafted ASN.1 data. This is fixed in 1.64.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservation

10/08/2019

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
168304	Oracle Data Integrator Runtime Java agent for ODI denial of service	404	Not defined	Official fix	CVE-2019-17359
163042	Oracle Communications Session Route Manager denial of service	404	Not defined	Official fix	CVE-2019-17359
163037	Oracle Communications Diameter Signaling Router IDIH denial of service	404	Not defined	Official fix	CVE-2019-17359
158399	Oracle PeopleSoft Enterprise HCM Global Payroll Switzerland Global Payroll for Switzerland allocation of resources	770	Not defined	Official fix	CVE-2019-17359
158293	Oracle Business Process Management Suite Runtime allocation of resources	770	Not defined	Official fix	CVE-2019-17359
158246	Oracle FLEXCUBE Private Banking Core allocation of resources	770	Not defined	Official fix	CVE-2019-17359
158128	Oracle Communications Convergence S/MIME Configuration allocation of resources	770	Not defined	Official fix	CVE-2019-17359
153637	Oracle Retail Xstore Point of Service Xenvironment allocation of resources	770	Not defined	Official fix	CVE-2019-17359
153612	Oracle PeopleSoft Enterprise PeopleTools Security allocation of resources	770	Not defined	Official fix	CVE-2019-17359
153492	Oracle WebCenter Portal Security allocation of resources	770	Not defined	Official fix	CVE-2019-17359
153491	Oracle SOA Suite Installation allocation of resources	770	Not defined	Official fix	CVE-2019-17359
153487	Oracle Managed File Transfer MFT Runtime Server allocation of resources	770	Not defined	Official fix	CVE-2019-17359
153443	Oracle Financial Services Analytical Applications Infrastructure allocation of resources	770	Not defined	Official fix	CVE-2019-17359
148876	Oracle Hospitality Guest Access Base allocation of resources	770	Not defined	Official fix	CVE-2019-17359
148839	Oracle WebLogic Server Third Party Tools allocation of resources	770	Not defined	Official fix	CVE-2019-17359
143189	Bouncy Castle Crypto ASN.1 allocation of resources	770	Not defined	Not defined	CVE-2019-17359

Description

CPE

CWE

CVSS

Exploits

History

Diff

Relate

Threat Intelligence

API JSON

API XML

API CSV

Sources

◂ PreviousOverviewNext ▸

Might our Artificial Intelligence support you?

Check our Alexa App!