CVE-2020-5360: 
Oracle Database Server vulnerability analysis and mitigation

Dell BSAFE Micro Edition Suite, versions prior to 4.5, contains a Buffer Under-Read Vulnerability identified as CVE-2020-5360. This vulnerability was disclosed in December 2020 and affects multiple systems including Dell BSAFE Micro Edition Suite and Oracle Database Enterprise Edition. The vulnerability allows an unauthenticated remote attacker to potentially exploit the affected systems (Dell Advisory, NVD).

The vulnerability is classified as a Buffer Under-Read issue with a CVSS v3.1 Base Score of 7.5 (HIGH), with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. The vulnerability can be exploited remotely over multiple protocols without requiring authentication or user interaction (Dell Advisory, Oracle CPU).

A successful exploitation of this vulnerability can result in undefined behavior or a complete crash of the affected systems. The vulnerability primarily impacts system availability, with no direct impact on confidentiality or integrity (Dell Advisory).

The vulnerability is remotely exploitable without requiring authentication, making it relatively easy to exploit. No specific exploit details or reports of active exploitation in the wild have been publicly disclosed (NVD).

The primary mitigation is to upgrade to Dell BSAFE Micro Edition Suite version 4.5 or later. For Oracle Database users, the vulnerability was addressed in the April 2021 Critical Patch Update for versions 12.1.0.2, 12.2.0.1, 18c, and 19c (Oracle CPU, Dell Advisory).