Oracle GoldenGate Manager Command Stack Buffer Overflow (CVE-2018-2913)

A stack-based buffer overflow exists in Oracle GoldenGate Manager. The vulnerability is due an input validation error when processing overly long command name. Successful exploitation could lead to arbitrary code execution...

Oracle Fixes 301 Flaws in October Critical Patch Update

Oracle has released a critical patch update addressing more than 300 vulnerabilities across several of its products – including one flaw with a CVSS 3.0 score of 10 that could allow the takeover of the company’s software package, Oracle GoldenGate. Of the 301 security flaws that were fixed in thi...

CVE-2018-2913

CVE-2018-2913 affects Oracle GoldenGate’s Monitoring Manager. A stack-based buffer overflow vulnerability exists in the GoldenGate Manager that can be triggered by sending an overly long GGSCI command over TCP, allowing a remote, unauthenticated attacker to potentially take over GoldenGate. Affec...