CVE-2020-14537

CVE-2020-14537 affects Oracle Solaris 11 Packaging Scripts. A local, high-privilege attacker with logon and, per the 2020 Jul CPU notes, user interaction can cause a hang or complete DOS. CVSSv3.1 base score 5.5 (A: HIGH, Availability). No exploitation details are provided beyond vendor advisorie...

CVE-2020-14542

Vulnerability in the Oracle Solaris product of Oracle Systems component: libsuri. The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful...

CVE-2020-14545

Vulnerability in the Oracle Solaris product of Oracle Systems component: Device Driver Utility. The supported version that is affected is 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle...

CVE-2020-14537

Vulnerability in the Oracle Solaris product of Oracle Systems component: Packaging Scripts. The supported version that is affected is 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris...

CVE-2020-14545

Vulnerability in the Oracle Solaris product of Oracle Systems component: Device Driver Utility. The supported version that is affected is 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle...

The vulnerability of the svcbundle component of the Oracle Solaris operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the svcbundle component of the Oracle Solaris operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information...

The vulnerability of the Common Desktop Environment component of the Oracle Solaris operating system allows a hacker to gain full control over the application.

The vulnerability of the Common Desktop Environment component of the Oracle Solaris operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application...

The vulnerability of the Whodo component in the Oracle Solaris operating system allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Whodo component in the Oracle Solaris operating system is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Common Desktop Environment component of the Oracle Solaris operating system, which allows a hacker to perform arbitrary actions.

The vulnerability of the Common Desktop Environment component of the Oracle Solaris operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to perform arbitrary actions...

The vulnerability of the Common Desktop Environment component of the Oracle Solaris operating system allows a hacker to gain full control over the application.

The vulnerability of the Common Desktop Environment component of the Oracle Solaris operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application...

Release Information for Veeam Agent for Oracle Solaris 2.0

Requirements Upgrade from v1 is not supported, clean installation is required. Upgrade from Veeam Agent for Solaris 2.0 RTM build 2.0.0.123 is possible. Please confirm that you are running version 2.0.0.123 or later prior to upgrading. You can check this using veeamconfig --version in Oracle...

Oracle Solaris Common Desktop Environment 1.6 - Local Privilege Escalation Exploit

Title: Oracle Solaris Common Desktop Environment 1.6 - Local Privilege Escalation Author: Marco Ivaldi Vendor: www.oracle.com CVE: CVE-2020-2944 / raptorsdtcmconv.c - CDE sdtcmconvert LPE for Solaris/Intel Copyright c 2019-2020 Marco Ivaldi A buffer overflow in the SanityCheck function in the...

Oracle Solaris Common Desktop Environment 1.6 - Local Privilege Escalation

Title: Oracle Solaris Common Desktop Environment 1.6 - Local Privilege Escalation Date: 2020-04-21 Author: Marco Ivaldi Vendor: www.oracle.com CVE: CVE-2020-2944 / raptorsdtcmconv.c - CDE sdtcmconvert LPE for Solaris/Intel Copyright c 2019-2020 Marco Ivaldi A buffer overflow in the SanityCheck...

Common Desktop Environment 1.6 Local Privilege Escalation Exploit

A buffer overflow in the SanityCheck function in the Common Desktop Environment version distributed with Oracle Solaris 10 1/13 Update 11 and earlier allows local users to gain root privileges via a long calendar name or calendar owner passed to sdtcmconvert in a malicious calendar file. The open...

Common Desktop Environment 2.3.1 / 1.6 libDtSvc Buffer Overflow Vulnerability

A difficult to exploit stack-based buffer overflow in the DtCreateDtDirs function in the Common Desktop Environment version distributed with Oracle Solaris 10 1/13 Update 11 and earlier may allow local users to corrupt memory and potentially execute arbitrary code in order to escalate privileges...

Common Desktop Environment 1.6 Local Privilege Escalation

@Mediaservice.net Security Advisory 2020-05 last updated on 2020-04-15 Title: Local privilege escalation via CDE sdtcmconvert Application: Common Desktop Environment 1.6 and earlier Platforms: Oracle Solaris 10 1/13 Update 11 and earlier Other platforms are potentially affected see below...

Common Desktop Environment 2.3.1 / 1.6 libDtSvc Buffer Overflow

@Mediaservice.net Security Advisory 2020-06 last updated on 2020-04-15 Title: Stack-based buffer overflow in CDE libDtSvc Application: Common Desktop Environment 2.3.1 and earlier Common Desktop Environment 1.6 and earlier2020-06-cde-libDtSvc.txt Platforms: Oracle Solaris 10 1/13 Update 11 and...

Unspecified Vulnerability in Oracle Solaris (CNVD-2020-26988)

Oracle Solaris is a Unix-like operating system. A security vulnerability exists in the SMF command svcbundle component in Oracle Solaris 11. An attacker can exploit the vulnerability to update, insert, or delete access to certain Oracle Solaris data...

Unspecified Vulnerability in Oracle Solaris (CNVD-2020-26989)

Oracle Solaris is a UNIX operating system from Oracle. A security vulnerability exists in the Common Desktop Environment component of Solaris versions 10 and 11 in Oracle Systems. An attacker could exploit this vulnerability to compromise Solaris, affecting the availability, confidentiality, and...

Oracle Solaris Unauthorized Read Vulnerability (CNVD-2020-25796)

Oracle Solaris is a UNIX operating system from Oracle. A security vulnerability exists in the Whodo component of Solaris versions 10 and 11 in Oracle Systems. An attacker could exploit the vulnerability to gain unauthorized access to data, compromising the confidentiality of the data...