{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[],"affected_systems_content":"<P>Oracle Database Server versions 11.2.0.4 et12.1.0.2</P>","content":"## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l'\u00e9diteur pour l'obtention des\ncorrectifs (cf. section Documentation).\n","cves":[{"name":"CVE-2017-3310","url":"https://www.cve.org/CVERecord?id=CVE-2017-3310"},{"name":"CVE-2017-3240","url":"https://www.cve.org/CVERecord?id=CVE-2017-3240"}],"links":[{"title":"Bulletin de s\u00e9curit\u00e9 Oracle cpujan2017-2881727 du 17    janvier 2017","url":"http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixDB"},{"title":"Bulletin de s\u00e9curit\u00e9 Oracle cpujan2017verbose-2881728 du 17    janvier 2017","url":"http://www.oracle.com/technetwork/security-advisory/cpujan2017verbose-2881728.html#DB"}],"reference":"CERTFR-2017-AVI-020","revisions":[{"description":"version initiale.","revision_date":"2017-01-18T00:00:00.000000"}],"risks":[{"description":"Ex\u00e9cution de code arbitraire \u00e0 distance"},{"description":"Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"}],"summary":"De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans <span\nclass=\"textit\">Oracle Database Server</span>. Elles permettent \u00e0 un\nattaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance et\nune atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n","title":"Multiples vuln\u00e9rabilit\u00e9s dans Oracle Database Server","vendor_advisories":[{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Oracle cpujan2017verbose-2881728 du 17 janvier 2017","url":null},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Oracle cpujan2017-2881727 du 17 janvier 2017","url":null}]}