cancel
Showing results for 
Search instead for 
Did you mean: 
Create a Post
Highlighted
Copper

Oracle January 2020 CVEs (CVE-2020-2546)

We have a vendor that cannot patch a system for CVE-2020-2546, does anyone know if there will be a signature available soon?

While looking for this, I see there is a lot of new Oracle exploits being patched, so I assume people are hard at work to create virtual patching.

Ref; https://www.tenable.com/blog/oracle-january-2020-critical-patch-update-contains-255-cves

0 Kudos
5 Replies
Highlighted

Re: Oracle January 2020 CVEs (CVE-2020-2546)

Hi @Sigbjorn 

 

This specific vulnerability does not have a proof of concept or a known exploit in the wild. That means, that for now there isn't enough information in order to develop a protection.

We are constantly monitoring these kind of vulnerabilities, and will provide relevant protections as soon as the required information is available.

0 Kudos
Highlighted
Copper

Re: Oracle January 2020 CVEs (CVE-2020-2546)

Hi Val,

Thank you for the feedback.

Highlighted
Ivory

Re: Oracle January 2020 CVEs (CVE-2020-2546)

Hello Val I just stumbled onto this thread, just wanted to check is there any updates in regards to the CVE in question? (CVE-2020-2546)

0 Kudos

Re: Oracle January 2020 CVEs (CVE-2020-2546)

No. Without PoC or an exploit, there is no way to provide a signature based protection

Highlighted
Ivory

Re: Oracle January 2020 CVEs (CVE-2020-2546)

Hey Val,
Alright, thank you for the quick reply
0 Kudos