Oracle Services Tools Bundle vulnerabilities

2 CVEs affecting Oracle Services Tools Bundle, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-1559, published 2019-02-27.

More from Oracle.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-1559, published 2019-02-27. Medium severity, CVSS 5.9. EPSS: 17.1% chance of exploitation in the next 30 days. If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling…
• CVE-2019-3822, published 2019-02-06. Critical severity, CVSS 9.8. EPSS: 12.9% chance of exploitation in the next 30 days. libcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow. The function creating an outgoing NTLM type-3 header…