The GIOP service in TNS Listener in the Oracle Net Services component in Oracle Database 9.0.1.5+ 9.2.0.8 9.2.0.8DV 10.1.0.5 and 10.2.0.3 allows remote attackers to cause a denial of service (crash) or read potentially sensitive memory via a connect GIOP packet with an invalid data size which triggers a buffer over-read aka DB22.