Oracle GoldenGate Manager Command Tab Parsing Denial of Service (CVE-2018-2912)

A denial of service vulnerability exists in Oracle GoldenGate Manager. The vulnerability is due to an input validation error when parsing a command which is not correctly separated by TAB characters. Successful exploitation could lead to a crash of the Manager service, causing a denial-of-service...

CVE-2018-2912

CVE-2018-2912 affects Oracle GoldenGate, specifically the Manager subcomponent. The vulnerability allows an unauthenticated, remote attacker over TCP to cause a hang or crash (DoS) in GoldenGate. Affected versions are 12.1.2.1.0, 12.2.0.2.0, and 12.3.0.1.0. The provided documents state the issue ...