Multiple vulnerabilities in Oracle SD-WAN Edge

1) Buffer overflow

EUVDB-ID: #VU19591

Risk: High

CVSSv4.0: 6.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2019-1010238

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error when processing utf-8 strings in the pango_log2vis_get_embedding_levels() function in pango-bidi-type.c. A remote attacker can pass a specially crafted string to the application, trigger heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Oracle SD-WAN Edge: 7.3.0.0.0 - 8.2.0.0.0

CPE2.3

• cpe:2.3:a:oracle:oracle_sd-wan_edge:7.3.0.0.0:*:*:*:*:*:*:*
• cpe:2.3:a:oracle:oracle_sd-wan_edge:8.0.0.0.0:*:*:*:*:*:*:*
• cpe:2.3:a:oracle:oracle_sd-wan_edge:8.1.0.0.0:*:*:*:*:*:*:*

External links

https://www.oracle.com/security-alerts/cpuapr2020.html?534793

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Out-of-bounds write

EUVDB-ID: #VU21255

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2019-14821

CWE-ID: CWE-787 - Out-of-bounds write

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error in the KVM coalesced MMIO support functionality due to incorrect processing of shared indexes. A local user can run a specially crafted application to trigger an out-of-bounds write error and write data to arbitrary address in the kernel memory.

Successful vulnerability exploitation may allow an attacker to execute arbitrary code on the system with root privileges.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Oracle SD-WAN Edge: 7.3.0.0.0 - 8.2.0.0.0

CPE2.3

• cpe:2.3:a:oracle:oracle_sd-wan_edge:7.3.0.0.0:*:*:*:*:*:*:*
• cpe:2.3:a:oracle:oracle_sd-wan_edge:8.0.0.0.0:*:*:*:*:*:*:*
• cpe:2.3:a:oracle:oracle_sd-wan_edge:8.1.0.0.0:*:*:*:*:*:*:*

External links

https://www.oracle.com/security-alerts/cpuapr2020.html?534793

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.