Critical Oracle Database Security Bugs Patched in Update
Oracle swatted 13 security bugs in its database products July 13 in a critical patch update. All totaled, Oracle released 59 security patches, including 21 for the Oracle Solaris product suite.Oracle pushed out 59 security patches July 13, including 13 for its database portfolio. Six of the 13 database vulnerabilities are for the Oracle Database server. Four of these can be exploited remotely over a network without authentication, Oracle advised. Both of the vulnerabilities in the TimesTen In-Memory Database can be exploited remotely without authentication as well, as can three of the five bugs patched in Oracle Secure Backup.
"As is typical for the most recent Oracle CPUs, the most severe are in the network layer -- these are very dangerous because they are exploitable remotely and without authentication; if someone were to get through they would have arbitrary code execution capabilities and could literally do anything on the target machine," explained Roy Fox, head of security research at Sentrigo.