CVE-2023-22003

CVE-2023-22003 affects Oracle Solaris (Utilities component) on Solaris 10 and 11. The vulnerability details indicate an unauthenticated attacker with access to the environment where Oracle Solaris runs can compromise Solaris, with exploitation requiring user interaction. CVSS v3.1 base score 3.3 ...

CVE-2023-21984

CVE-2023-21984 affects Oracle Solaris 11 (Libraries component). The vulnerability allows a low-privilege, network-access attacker (via HTTP) to cause a hang or repeatable crash (DoS) on affected systems. Root cause and affected details are documented in CVE records and Oracle CPU APR2023: CVSS v3...

CVE-2023-21985

CVE-2023-21985 affects Oracle Solaris (Utility) on Solaris 10 and 11. The vulnerability is exploitable to achieve total compromise with a high-privilege attacker who already has logon, requiring user interaction. The CVSS 3.1 base score is 7.7 (High) with impacts to confidentiality, integrity, an...

CVE-2023-21928

CVE-2023-21928 affects Oracle Solaris 11, in the IPS repository daemon. The issue is due to insufficient input validation, enabling a high-privilege attacker with local access to compromise Solaris; exploitation requires user interaction. The impact is unauthorized updates/inserts/deletes to Sola...

CVE-2023-21896

CVE-2023-21896 affects Oracle Solaris NSSwitch on Solaris 10 and 11. The vulnerability, described as difficult to exploit, allows a low-privileged attacker with logon to compromise Solaris and can lead to a full takeover. The CVSS v3.1 base score is 7.0 (Impact: Confidentiality, Integrity, Availa...

CVE-2023-21896: Improper Privilege Management

Vulnerability in the Oracle Solaris product of Oracle Systems component: NSSwitch. Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris...

CVE-2023-22003: Undefined Security Weakness

Vulnerability in the Oracle Solaris product of Oracle Systems component: Utility. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris...

Spoofing

Vulnerability in the Oracle Solaris product of Oracle Systems component: NSSwitch. Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise Oracle Solaris. Successful attacks...

CVE-2023-21900

CVE-2023-21900 affects the Oracle Solaris NSSwitch component on Solaris 10 and 11. The vulnerability allows a high-privilege attacker with network access via multiple protocols to compromise Solaris, with attacks requiring human interaction. Impacts include unauthorized updates/deletes to Solaris...

CVE-2023-21900: Undefined Security Weakness

Vulnerability in the Oracle Solaris product of Oracle Systems component: NSSwitch. Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise Oracle Solaris. Successful attacks...

CVE-2022-39401: Undefined Security Weakness

Vulnerability in the Oracle Solaris product of Oracle Systems component: Kernel. The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful...

CVE-2022-39417

CVE-2022-39417 affects Oracle Solaris 11, specifically the Filesystem component. The vulnerability can be exploited by a low-privilege user with logon to the host, potentially causing the system to hang or enter a frequently repeatable crash (complete DoS). CVSS v3.1 base score is 5.5 (Availabili...

CVE-2022-21439

Vulnerability in the Oracle Solaris product of Oracle Systems component: Kernel. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris...

Code injection

Vulnerability in the Oracle Solaris product of Oracle Systems component: Kernel. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris...

CVE-2022-21563

CVE-2022-21563 affects Oracle ZFS Storage Appliance Kit (Core) in Oracle Systems, with affected version 8.8. The vulnerability allows a high-privilege attacker with local logon to potentially read or modify Oracle ZFS Storage Appliance Kit data and cause a partial denial of service. The CVSS 3.1 ...

CVE-2022-21533

CVE-2022-21533 affects Oracle Solaris 11 SMB Server. The vulnerability in the SMB Server component allows a low-privilege, local attacker to cause a hang or repeatable crash (complete DoS). This matches Oracle’s July-2022 CPU advisory context for Solaris; patches addressing this vulnerability wer...

CVE-2022-21514

CVE-2022-21514 affects Oracle Solaris 11, specifically the Remote Administration Daemon. The vulnerability enables a network-based attacker with no privileges to cause a hang or crash (DoS). CVSS v3.1 base score 7.5 (Availability impact). Oracle’s JUL 2022 CPU SRU11_4_46_119_2 and related patches...

CVE-2022-21513

CVE-2022-21513 affects Oracle ZFS Storage Appliance Kit, Core component, in the 8.8 release. The vulnerability is described as a high-severity issue with a CVSS v3.1 base score of 8.2, enabling a high-privilege attacker who can log on to the infrastructure where the kit runs to compromise the pro...

CVE-2022-21513

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems component: Core. The supported version that is affected is 8.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle ZFS Storage Appliance Kit executes to...

Oracle Solaris Input Validation Error Vulnerability (CNVD-2022-36947)

Oracle Solaris is a UNIX operating system from Oracle. A security vulnerability exists in Oracle Systems' Oracle Solaris product that could allow a low-privileged attacker to compromise Oracle Solaris by logging on to the infrastructure that executes Oracle Solaris.The vulnerability could be...