The Core RDBMS component in Oracle Database 9.0.1.5+ 9.2.0.8 9.2.0.8DV 10.1.0.5 and 10.2.0.3 allows remote attackers to cause a denial of service (CPU consumption) via a crafted type 6 Data packet aka DB20.