CVE-2020-14871

🗓️ 21 Oct 2020 14:04:29Reported by oracleType

cve🔗 web.nvd.nist.gov📰️ 8 Media mentions👁 1452 Views

Vulnerability in Oracle Solaris allows takeove

Reporter	Title	Published	Views	Family All 45
0day.today	SunSSH 11.0 x86 - libpam Remote Root Exploit	15 Dec 202000:00	–	zdt
0day.today	Oracle Solaris SunSSH PAM parse_user_name() Buffer Overflow Exploit	17 Dec 202000:00	–	zdt
0day.today	Solaris SunSSH 11.0 x86 - libpam Remote Root Exploit	22 May 202100:00	–	zdt
0day.today	Solaris SunSSH 11.0 x86 - libpam Remote Root Exploit (3)	21 Jun 202100:00	–	zdt
GithubExploit	exploits	25 May 202601:12	–	githubexploit
ATTACKERKB	CVE-2020-14871	21 Oct 202000:00	–	attackerkb
Information Security Automation	Last Week’s Security news: Cisco ASA, BIG-IQ, vSphere, Solaris, Dlink, iPhone %s, DarkRadiation, Google schema, John McAfee	28 Jun 202110:59	–	avleonov
BDU FSTEC	The vulnerability of the parse_user_name() function in the libpam library of the Pluggable Authentication Module of the Solaris operating system allows a perpetrator to gain full control over the application.	24 Nov 202000:00	–	bdu_fstec
Circl	CVE-2020-14871	2 Nov 202019:35	–	circl
CISA KEV Catalog	Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability	3 Nov 202100:00	–	cisa_kev

NVD

Node

oracle solarisRange10–11.1

oracle solarisMatch9

[
  {
    "vendor": "Oracle Corporation",
    "product": "Solaris Operating System",
    "versions": [
      {
        "version": "10",
        "status": "affected"
      },
      {
        "version": "11",
        "status": "affected"
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/160609/Oracle-Solaris-SunSSH-PAM-parse_user_name-Buffer-Overflow.html
openwall	www.openwall.com/lists/oss-security/2021/03/03/1
oracle	www.oracle.com/security-alerts/cpuoct2020.html
packetstormsecurity	www.packetstormsecurity.com/files/159961/SunSSH-Solaris-10-x86-Remote-Root.html
packetstormsecurity	www.packetstormsecurity.com/files/163232/Solaris-SunSSH-11.0-Remote-Root.html
packetstormsecurity	www.packetstormsecurity.com/files/160510/Solaris-SunSSH-11.0-x86-libpam-Remote-Root.html
openwall	www.openwall.com/lists/oss-security/2024/07/03/3
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

17 Jun 2026 02:55Current

9.5High risk

Vulners AI Score9.5

CVSS 210

CVSS 3.110

EPSS0.80291

SSVC