CVEvulnerability
CVE-2021-2464
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-09-24
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
Vulnerability in Oracle Linux (component: OSwatcher). Supported versions that are affected are 7 and 8. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Linux executes to compromise Oracle Linux. Successful attacks of this vulnerability can result in takeover of Oracle Linux. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Affected configurations
• oracle engineered systems utilities 12.1.0.2
• oracle engineered systems utilities 19c
• oracle engineered systems utilities 21c
• oracle linux 7
• oracle linux 8
References
- https://linux.oracle.com/errata/ELSA-2021-9444.html Vendor Advisory
- https://www.oracle.com/security-alerts/cpuapr2022.html Patch, Vendor Advisory
- https://linux.oracle.com/errata/ELSA-2021-9444.html Vendor Advisory
- https://www.oracle.com/security-alerts/cpuapr2022.html Patch, Vendor Advisory