Lucene search

K
cve[email protected]CVE-2017-3276
HistoryJan 27, 2017 - 10:59 p.m.

CVE-2017-3276

2017-01-2722:59:03
web.nvd.nist.gov
17
cve-2017-3276
vulnerability
oracle
sun systems
solaris
kernel zones
security
risk

3 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:S/C:N/I:P/A:P

5.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H

5.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.8%

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel Zones virtualized block driver). The supported version that is affected is 11.3. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Solaris accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Solaris. CVSS v3.0 Base Score 5.7 (Integrity and Availability impacts).

Affected configurations

Vulners
NVD
Node
oraclesolarisRange11.3
VendorProductVersionCPE
oraclesolaris*cpe:2.3:o:oracle:solaris:*:*:*:*:*:*:*:*

CNA Affected

[
  {
    "product": "Solaris Operating System",
    "vendor": "Oracle",
    "versions": [
      {
        "status": "affected",
        "version": "11.3"
      }
    ]
  }
]

3 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:S/C:N/I:P/A:P

5.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H

5.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.8%

Related for CVE-2017-3276