PT-2023-9074 · Oracle · Oracle Solaris

Name of the Vulnerable Software and Affected Versions: Oracle Solaris version 11 Description: The issue is related to insufficient input validation in the Zones component of Oracle Solaris, allowing a high-privileged attacker with logon to the infrastructure to compromise Oracle Solaris. Successf...

Security Bulletin: IBM® Db2® is vulnerable to denial of service with a specially crafted ALTER TABLE statement (CVE-2023-38720)

Summary IBM® Db2® is vulnerable to denial of service with a specially crafted ALTER TABLE statement. Vulnerability Details CVEID:CVE-2023-38720 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes Db2 Connect Server is vulnerable to denial of service with a specially crafted ALTER TABLE...

The vulnerability of the Oracle Solaris operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the Oracle Solaris operating system’s kernel is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

Oracle Solaris Critical Patch Update : oct2023_SRU11_4_61_151_2

The remote host is affected by a Denial of Service vulnerability which could be exploited by a low privileged attacker with logon to the infrastructure where Oracle Solaris executes. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid183516; scriptversion"1.1";...

Oracle Solaris Critical Patch Update : oct2023_SRU11_4_62_151_3

The remote host is affected by a difficult to exploit vulnerability which allows an unauthenticated attacker with network access via rquota to compromise Oracle Solaris. Successful attacks require human interaction from a person other than the attacker and can result in unauthoraized read access ...

Vulnerabilities fixed in Oracle Systems

Vulnerabilities have been fixed in Oracle Systems. The vulnerabilities allow a malicious person to carry out attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS. Access to sensitive data Oracle has fixed vulnerabilities in the following products: Oracl...

Oracle Patch Tuesday, October 2023 Security Update Review

Oracle has released its fourth quarterly edition of Critical Patch Update, which contains a group of patches for 387 security vulnerabilities. Some of the vulnerabilities addressed in this update impact more than one product. These patches address vulnerabilities in Oracle code and third-party...

Solaris 10 (sparc) : 150383-32

SunOS 5.10: wanboot patch. Date this patch was last updated by Sun : Oct/16/23 %NASLMINLEVEL 80900 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid183293; scriptversion"1.0";...

Solaris 10 (x86) : 151913-23

SunOS 5.10x86: OpenSSL 1.0.2 patch. Date this patch was last updated by Sun : Oct/16/23 %NASLMINLEVEL 80900 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid183292; scriptversion"1.0...

Solaris 10 (sparc) : 151912-23

SunOS 5.10: OpenSSL 1.0.2 patch. Date this patch was last updated by Sun : Oct/16/23 %NASLMINLEVEL 80900 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid183291; scriptversion"1.0";...

CVE-2023-22129

Vulnerability in the Oracle Solaris product of Oracle Systems component: Kernel. The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful...

CVE-2023-22128

Vulnerability in the Oracle Solaris product of Oracle Systems component: Filesystem. Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via rquota to compromise Oracle Solaris. Successful attacks require human...

CVE-2023-22129

Vulnerability in the Oracle Solaris product of Oracle Systems component: Kernel. The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful...

CVE-2023-22128

Vulnerability in the Oracle Solaris product of Oracle Systems component: Filesystem. Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via rquota to compromise Oracle Solaris. Successful attacks require human...

Design/Logic Flaw

Vulnerability in the Oracle Solaris product of Oracle Systems component: Kernel. The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful...

Design/Logic Flaw

Vulnerability in the Oracle Solaris product of Oracle Systems component: Filesystem. Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via rquota to compromise Oracle Solaris. Successful attacks require human...

CVE-2023-22128

CVE-2023-22128 affects Oracle Solaris (Filesystem) on Solaris 10 and 11. The vulnerability is exploitable by an unauthenticated attacker with network access via rquota, with user interaction required, leading to possible unauthorized read access to a subset of data. The published summaries consis...

CVE-2023-22129

CVE-2023-22129 affects Oracle Solaris 11 kernel on SPARC systems. The vulnerability allows a low-privilege user with logon to the host to cause a hang or frequently repeatable crash (DoS) of Oracle Solaris, with impact on availability and no confidentiality/integrity impact per the CVSS data. Con...

Oracle Solaris Security Vulnerability

Oracle Solaris is a UNIX operating system from Oracle Corporation. A security vulnerability exists in Oracle Systems' Oracle Solaris versions 10 and 11, which originated from a vulnerability that could compromise Oracle Solaris by allowing an unauthenticated attacker to gain network access via...

Oracle Solaris Security Vulnerability

Oracle Solaris is a UNIX operating system from Oracle Corporation. A security vulnerability exists in Oracle Systems' Oracle Solaris version 11, which originated from a vulnerability that allows a low-privileged attacker to log on to the infrastructure that executes Oracle Solaris in order to...