Design/Logic Flaw

Vulnerability in the Oracle Solaris product of Oracle Systems component: Device Driver Utility. The supported version that is affected is 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle...

CVE-2020-14724

CVE-2020-14724 is a vulnerability in Oracle Solaris, specifically impacting the Device Driver Utility component. Multiple connected sources confirm affected product: Oracle Solaris (version 11). The vulnerability allows a low-privileged attacker who has logon access to the system to compromise Or...

CVE-2020-14545

CVE-2020-14545 is a vulnerability in Oracle Solaris (component: Device Driver Utility) affecting the 11.x family. The connected documents specify that the vulnerability allows a low-privilege, logon-based attacker, with required user interaction, to compromise Oracle Solaris and potentially perfo...

CVE-2020-14537

CVE-2020-14537 affects Oracle Solaris 11 Packaging Scripts. A local, high-privilege attacker with logon and, per the 2020 Jul CPU notes, user interaction can cause a hang or complete DOS. CVSSv3.1 base score 5.5 (A: HIGH, Availability). No exploitation details are provided beyond vendor advisorie...

CVE-2020-14542

Based on connected records, CVE-2020-14542 affects Oracle Solaris (libsuri) on the 11.x line. It is described as an information-disclosure vulnerability allowing a local, low-privilege attacker with logon to read a subset of Solaris data. The Red Hat entry reinforces the same component/version im...

Oracle Solaris Critical Patch Update : apr2020_SRU11_4_19_3_0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Sun ZFS Storage Appliance Kit product of Oracle Systems component: Operating System Image. The supported version that is affected is 8.8. Difficult to exploit vulnerability allows low...

Unspecified Vulnerability in Oracle Systems Solaris (CNVD-2020-24432)

Oracle Systems Solaris is an Oracle MySQL server product from Oracle Corporation. A security vulnerability exists in Oracle Systems Solaris, which can be exploited by attackers to compromise the availability, confidentiality, and integrity of data by taking control of Solaris...

CVE-2020-2851

Vulnerability in the Oracle Solaris product of Oracle Systems component: Common Desktop Environment. Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise...

CVE-2020-2944

CVE-2020-2944 is a local privilege-escalation vulnerability in Oracle Solaris, affecting the Common Desktop Environment (CDE) component. A buffer overflow in sdtcm_convert allows a low-privileged user with logon to Solaris to gain root privileges when handling a malicious calendar file; the issue...

CVE-2020-2927

CVE-2020-2927 affects Oracle Solaris (Common Desktop Environment) on Solaris 10 and 11. It is a local-privilege vulnerability in the CDE component that can lead to takeover of Oracle Solaris; CVSS 3.0 base score 7.8 (HIGH). Oracle’s APR2020 CPU/SRU11 3.36.20.0 patch bundle includes this CVE, indi...

CVE-2020-2851

CVE-2020-2851 affects Oracle Solaris (Common Desktop Environment: libDtSvc) on Solaris 10 and 11. A stack-based buffer overflow in libDtSvc may allow a low-privilege local user to gain control of the system, potentially leading to takeover of Solaris and impact to other products. The vulnerabilit...

CVE-2020-2771

CVE-2020-2771 affects Oracle Solaris 10 and 11, in the Whodo component. The issue is a heap-based buffer overflow in setuid root whodo and w binaries that can be triggered by a low-privileged user with logon access, with required human interaction, potentially allowing unauthorized read access to...

CVE-2020-2771

Vulnerability in the Oracle Solaris product of Oracle Systems component: Whodo. Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris...

CVE-2020-2851: Undefined Security Weakness

Vulnerability in the Oracle Solaris product of Oracle Systems component: Common Desktop Environment. Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise...

Oracle Solaris Critical Patch Update : jan2020_SRU11_4_17_3_0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Oracle Solaris product of Oracle Systems component: Consolidation Infrastructure. The supported version that is affected is 11. Difficult to exploit vulnerability allows low privileged...

CVE-2020-2680

Vulnerability in the Oracle Solaris product of Oracle Systems component: Filesystem. The supported version that is affected is 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While th...

CVE-2020-2578

Vulnerability in the Oracle Solaris product of Oracle Systems component: Kernel. The supported version that is affected is 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via SMB to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris,...

Code injection

Vulnerability in the Oracle Solaris product of Oracle Systems component: Consolidation Infrastructure. The supported version that is affected is 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracl...

Buffer overflow

Vulnerability in the Oracle VM Server for SPARC product of Oracle Systems component: Templates. The supported version that is affected is 3.6. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM Server for SPARC executes to compromise...

CVE-2020-2696

CVE-2020-2696 affects Oracle Solaris 10, specifically the Common Desktop Environment (CDE) dtsession component. A buffer overflow in CheckMonitor() (CDE 2.3.1 and earlier; 1.6 and earlier) allows a local user with logon to gain root privileges via a crafted palette name in a malicious .Xdefaults ...