Oracle Enterprise Communications Broker 3.1.0
Approved changes feed: RSS · Atom
cpe:2.3:a:oracle:enterprise_communications_broker:3.1.0:*:*:*:*:*:*:*
part: a version: 3.1.0 update: *
| Vendor | Oracle (3509f9eb-d8a0-57da-b153-b8021021b133) |
|---|---|
| Product | Enterprise Communications Broker (e7c88cf2-eb81-5c07-b834-cb7583e8635b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-11080 |
vulnerable | 2026-06-08 05:16:36.417715 |
Denial of service in nghttp2
LOW (3.7)
In nghttp2 before version 1.41.0, the overly large HTTP/2 SETTINGS frame payload causes denial of service. The proof of concept attack involves a malicious client constructing a SETTINGS frame with a length of 14,400 bytes (2400 individual settings entries) over and over again. The attack causes the CPU to spike at 100%. nghttp2 v1.41.0 fixes this vulnerability. There is a workaround to this vulnerability. Implement nghttp2_on_frame_recv_callback callback, and if received frame is SETTINGS frame and the number of settings entries are large (e.g., > 32), then drop the connection.
Published: 2020-06-03T00:00:00.000Z
Updated: 2025-06-09T15:45:50.711Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10726 |
vulnerable | 2026-06-08 05:16:35.743405 |
Details available
MEDIUM (6)
A vulnerability was found in DPDK versions 19.11 and above. A malicious container that has direct access to the vhost-user socket can keep sending VHOST_USER_GET_INFLIGHT_FD messages, causing a resource leak (file descriptors and virtual memory), which may result in a denial of service.
Published: 2020-05-20T13:04:47.000Z
Updated: 2024-08-04T11:14:15.435Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10725 |
vulnerable | 2026-06-08 05:16:35.742877 |
Details available
HIGH (7.7)
A flaw was found in DPDK version 19.11 and above that allows a malicious guest to cause a segmentation fault of the vhost-user backend application running on the host, which could result in a loss of connectivity for the other guests running on that host. This is caused by a missing validity check of the descriptor address in the function `virtio_dev_rx_batch_packed()`.
Published: 2020-05-20T13:16:55.000Z
Updated: 2024-08-04T11:14:14.236Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10723 |
vulnerable | 2026-06-08 05:16:35.741772 |
Details available
MEDIUM (5.1)
A memory corruption issue was found in DPDK versions 17.05 and above. This flaw is caused by an integer truncation on the index of a payload. Under certain circumstances, the index (a UInt) is copied and truncated into a uint16, which can lead to out of bound indexing and possible memory corruption.
Published: 2020-05-19T18:02:46.000Z
Updated: 2024-08-04T11:14:14.697Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10722 |
vulnerable | 2026-06-08 05:16:35.739888 |
Details available
MEDIUM (5.1)
A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhost_user_set_log_base() could result in a smaller memory map than requested, possibly allowing memory corruption.
Published: 2020-05-19T18:04:15.000Z
Updated: 2024-08-04T11:14:14.909Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9513 |
vulnerable | 2026-06-08 05:14:25.627076 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9511 |
vulnerable | 2026-06-08 05:14:25.616964 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-6485 |
vulnerable | 2026-06-08 05:11:53.792506 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16865 |
vulnerable | 2026-06-08 05:11:05.630586 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16864 |
vulnerable | 2026-06-08 05:11:05.628522 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-11237 |
vulnerable | 2026-06-08 05:10:38.028937 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-11236 |
vulnerable | 2026-06-08 05:10:38.026307 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.