Vulnerability in Oracle Linux (component: OSwatcher). Supported versions that are affected are 7 and 8. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Linux executes to compromise Oracle Linux. Successful attacks of this vulnerability can result in takeover of Oracle Linux. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
References
| Link | Resource |
|---|---|
| https://linux.oracle.com/errata/ELSA-2021-9444.html | Vendor Advisory |
| https://www.oracle.com/security-alerts/cpuapr2022.html | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
06 Oct 2022, 17:52
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:oracle:engineered_systems_utilities:21c:*:*:*:*:*:*:* cpe:2.3:o:oracle:engineered_systems_utilities:12.1.0.2:*:*:*:*:*:*:* cpe:2.3:o:oracle:engineered_systems_utilities:19c:*:*:*:*:*:*:* |
|
| First Time |
Oracle engineered Systems Utilities
|
|
| References | (MISC) https://www.oracle.com/security-alerts/cpuapr2022.html - Patch, Vendor Advisory |
19 Apr 2022, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
30 Sep 2021, 18:17
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 7.2
v3 : 7.8 |
| CWE | NVD-CWE-noinfo | |
| CPE | cpe:2.3:o:oracle:linux:8:-:*:*:*:*:*:* cpe:2.3:o:oracle:linux:7:-:*:*:*:*:*:* |
|
| References | (MISC) https://linux.oracle.com/errata/ELSA-2021-9444.html - Vendor Advisory |
25 Sep 2021, 09:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
24 Sep 2021, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-09-24 19:15
Updated : 2023-12-10 14:09
NVD link : CVE-2021-2464
Mitre link : CVE-2021-2464
CVE.ORG link : CVE-2021-2464
JSON object : View
Products Affected
oracle
- linux
- engineered_systems_utilities
CWE