CVE-2017-10153

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2017-10153
Vulnerability in the Oracle Communications WebRTC Session Controller component of Oracle Communications Applications (subcomponent: Security (Gson)). Supported versions that are affected are 7.0, 7.1 and 7.2. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle Communications WebRTC Session Controller. While the vulnerability is in Oracle Communications WebRTC Session Controller, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Communications WebRTC Session Controller. CVSS 3.0 Base Score 6.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H).

6.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector : AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H

Exploitability : 1.8 / Impact : 4.0

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope CHANGED

3.5 /10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:N/AC:M/Au:S/C:N/I:N/A:P

Exploitability : 6.8 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication SINGLE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References
Link Resource
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html Patch Vendor Advisory
http://www.securityfocus.com/bid/101432 Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1039590 Third Party Advisory VDB Entry
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html Patch Vendor Advisory
http://www.securityfocus.com/bid/101432 Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1039590 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:oracle:communications_webrtc_session_controller:7.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_webrtc_session_controller:7.1:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_webrtc_session_controller:7.2:*:*:*:*:*:*:*
History

21 Nov 2024, 03:05

Type Values Removed Values Added
References () http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - Vendor Advisory, Patch () http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - Patch, Vendor Advisory
References () http://www.securityfocus.com/bid/101432 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/101432 - Third Party Advisory, VDB Entry
References () http://www.securitytracker.com/id/1039590 - Third Party Advisory, VDB Entry () http://www.securitytracker.com/id/1039590 - Third Party Advisory, VDB Entry
Information

Published : 2017-10-19 17:29

Updated : 2025-04-20 01:37

NVD link : CVE-2017-10153

Mitre link : CVE-2017-10153

CVE.ORG link : CVE-2017-10153

JSON object : View

Products Affected

oracle

  • communications_webrtc_session_controller
CWE
NVD-CWE-noinfo