Design/Logic Flaw

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Open Fabrics Tools. The supported version that is affected is 11.4. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Solaris executes to compromise...

Design/Logic Flaw

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. The supported version that is affected is 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via NFS to compromise Oracle Solaris. Successful attacks of...

CVE-2019-2878

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: HTTP data path subsystems. The supported version that is affected is 8.8.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromis...

CVE-2019-2844

CVE-2019-2844 affects the LDAP Client Tools subcomponent of Oracle Solaris 11.4. The vulnerability is described as easily exploitable, permitting a low-privileged attacker with logon to the Solaris host to compromise the system, with potential impact on confidentiality, integrity, and availabilit...

CVE-2019-2820

CVE-2019-2820 affects Oracle Solaris 11.4 (Oracle Sun Systems Products Suite) in the Gnuplot subcomponent. The vulnerability description indicates a low-privileged, logon-based attacker can compromise Oracle Solaris, with exploitation requiring user interaction and potentially leading to takeover...

CVE-2019-2820

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite subcomponent: Gnuplot. The supported version that is affected is 11.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise...

CVE-2019-2804

CVE-2019-2804 affects Oracle Solaris filesystem on 11.4 and 10. Exploitation requires a logon and user interaction; successful attacks can lead to takeover of Oracle Solaris. CVSSv3.0 base score 7.3. Remediation is available via the JUL2019 patch update (e.g., SRU11_4_8_5_0) addressing this vulne...

CVE-2019-2788

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Open Fabrics Tools. The supported version that is affected is 11.4. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Solaris executes to compromise...

CVE-2019-2788

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Open Fabrics Tools. The supported version that is affected is 11.4. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Solaris executes to compromise...

CVE-2019-2787

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite subcomponent: Automount. Supported versions that are affected are 11.4 and 10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via NFS to compromise Oracle Solaris. Successful...

CVE-2019-2787

CVE-2019-2787 affects Oracle Solaris Automount (component Automount) on Solaris 11.4 and 10. Exploitation requires network access via NFS and is unauthenticated, with user interaction required. Impact: unauthorized update/insert/delete and read access to Solaris data. Base score CVSSv3.0 4.2 (MED...

Oracle Sun Systems Products Suite Sun ZFS Storage Appliance Kit Component Access Control Error Vulnerability

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation.Sun ZFS Storage Appliance Kit AK is one of the ZFS storage appliance kits. A security vulnerability exists in the HTTP data path subsystems subcomponent of the Sun ZFS Storage AK component version 8.8.3 i...

Oracle Sun Systems Products Suite Solaris Component Denial of Service Vulnerability (CNVD-2019-23540)

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is one of the computer operating system components. A security vulnerability exists in the Open Fabrics Tools subcomponent of the Solaris component of Oracle Sun Systems Products Suite,...

Oracle Solaris Critical Patch Update : jul2019_SRU11_4_10_3_0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Oracle Solaris product of Oracle Sun Systems Products Suite component: Zones. The supported version that is affected is 11.4. Easily exploitable vulnerability allows low privileged...

Solaris 10 (sparc) : 119783-42

Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: Bind/Postinstall script for Bind package. The supported version that is affected is 10. Very difficult to exploit vulnerability requiring logon to Operating System plus additional login/authentication to component o...

Solaris 10 (x86) : 119784-42

Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: Bind/Postinstall script for Bind package. The supported version that is affected is 10. Very difficult to exploit vulnerability requiring logon to Operating System plus additional login/authentication to component o...

Solaris 10 (x86) : 153061-01

Vulnerability in the Oracle Solaris product of Oracle Sun Systems Products Suite component: Common Desktop Environment. The supported version that is affected is 10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to...

Solaris 10 (x86) : 150380-02

Vulnerability in the Oracle Solaris product of Oracle Sun Systems Products Suite component: Automount. Supported versions that are affected are 11.4 and 10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via NFS to compromise Oracle Solaris. Successful...

CVE-2019-2704

CVE-2019-2704 affects Oracle Solaris IPS Package Manager (IPS) on Solaris 11. An information disclosure vulnerability exists allowing an unauthenticated, network-reachable attacker (via HTTP) to read a subset of Solaris data. Multiple connected feeds corroborate the description across Red Hat, NV...

CVE-2019-2577

CVE-2019-2577 affects Oracle Solaris 11, specifically the File Locking Services subcomponent. The vulnerability can be exploited locally by a low-privilege user with logon to the affected Solaris host, potentially causing a partial denial of service. CVSS v3.0 base score is 3.3 (LOW) with a LOCAL...