PT-2022-2027 · Oracle · Oracle Solaris

🗓️ 19 Jan 2022 00:00:00Reported by Positive TechnologiesType

Unprivileged user can cause deadlock and kernel panic on tmpfs via crafted rename and rmdir, leading to denial of service.

Reporter	Title	Published	Views	Family All 16
Circl	CVE-2021-43395	14 Apr 202516:53	–	circl
CNNVD	Oracle Solaris 访问控制错误漏洞	18 Jan 202200:00	–	cnnvd
CVE	CVE-2021-43395	26 Dec 202200:00	–	cve
Cvelist	CVE-2021-43395	26 Dec 202200:00	–	cvelist
EUVD	EUVD-2021-30330	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Oracle Systems	19 Jan 202200:00	–	ncsc
NVD	CVE-2021-43395	26 Dec 202206:15	–	nvd
Oracle	Oracle Critical Patch Update Advisory - April 2022	19 Apr 202200:00	–	oracle
Oracle	Oracle Critical Patch Update Advisory - January 2022	18 Jan 202200:00	–	oracle
Prion	Design/Logic Flaw	26 Dec 202206:15	–	prion

Source	Link
github	www.github.com/illumos/illumos-gate/blob/b3403853e80914bd0aade9b5b605da4878078173/usr/src/uts/common/fs/tmpfs/tmp_dir.c
github	www.github.com/illumos/illumos-gate/blob/069654420de4aade43c63c43cd2896e66945fc8a/usr/src/uts/common/fs/tmpfs/tmp_vnops.c
github	www.github.com/illumos/illumos-gate/commit/f859e7171bb5db34321e45585839c6c3200ebb90
bdu	www.bdu.fstec.ru/vul/2022-01623
oracle	www.oracle.com/security-alerts/cpujan2022.html
illumos	www.illumos.org/issues/14424
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-43395
illumos	www.illumos.topicbox.com/groups/developer/T1c9e4f27f8c2f959/security-heads-up-illumos14424
tribblix	www.tribblix.org/relnotes.html
kebe	www.kebe.com/blog/

08 Aug 2023 00:00Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.15.5

EPSS0.00034

SSVC