EUVD-2019-14894

Malware in sbrugna...

Cross site scripting

There is an out-of-bounds read vulnerability in the Advanced Packages feature of the Gauss100 OLTP database in CampusInsight before V100R019C00SPC200. Attackers who gain the specific permission can use this vulnerability by sending elaborate SQL statements to the database. Successful exploit of...

CVE-2019-5278

There is an out-of-bounds read vulnerability in the Advanced Packages feature of the Gauss100 OLTP database in CampusInsight before V100R019C00SPC200. Attackers who gain the specific permission can use this vulnerability by sending elaborate SQL statements to the database. Successful exploit of...

CVE-2019-5278

CVE-2019-5278 affects Huawei GaussDB-100 OLTP (CampusInsight) prior to V100R019C00SPC200. The vulnerability is an out-of-bounds read in the Advanced Packages feature. With specific permissions, an attacker can issue crafted SQL statements to the database, potentially causing a crash. The issue is...

PT-2019-17553

Name of the Vulnerable Software and Affected Versions CampusInsight versions prior to V100R019C00SPC200 Description The issue is related to an out-of-bounds read in the Advanced Packages feature of the Gauss100 OLTP database. Attackers with specific permissions can exploit this by sending elabora...

CVE-2019-5278: Out-of-bounds Read

There is an out-of-bounds read vulnerability in the Advanced Packages feature of the Gauss100 OLTP database in CampusInsight before V100R019C00SPC200. Attackers who gain the specific permission can use this vulnerability by sending elaborate SQL statements to the database. Successful exploit of...

Security Advisory - Out-of-bounds Read Vulnerability in Advanced Packages of Gauss100 OLTP Database

There is an out-of-bounds read vulnerability in the Advanced Packages feature of the Gauss100 OLTP database. Attackers who gain the specific permission can use this vulnerability by sending elaborate SQL statements to the database. Successful exploit of this vulnerability may cause the database t...

CVE-2019-5289: Out-of-bounds Read

Gauss100 OLTP database in ManageOne with versions of 6.5.0 have an out-of-bounds read vulnerability due to the insufficient checks of the specific packet length. Attackers can construct invalid packets to attack the active and standby communication channels. Successful exploit of this vulnerabili...

PT-2019-4332

Name of the Vulnerable Software and Affected Versions Gauss100 OLTP database in ManageOne version 6.5.0 Description The issue is related to an out-of-bounds read due to insufficient checks of specific packet lengths. Attackers can construct invalid packets to attack active and standby communicati...