CVE-2023-21900: Undefined Security Weakness

Vulnerability in the Oracle Solaris product of Oracle Systems component: NSSwitch. Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise Oracle Solaris. Successful attacks...

libXpm -- Issues handling XPM files

The X.Org project reports: CVE-2022-46285: Infinite loop on unclosed comments When reading XPM images from a file with libXpm 3.5.14 or older, if a comment in the file is not closed i.e. a C-style comment starts with "/" and is missing the closing "/", the ParseComment function will loop forever...

The vulnerability of the Oracle Solaris operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the Oracle Solaris operating system’s kernel is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause service failures...

CVE-2021-43395

An issue was discovered in illumos before f859e7171bb5db34321e45585839c6c3200ebb90, OmniOS Community Edition r151038, OpenIndiana Hipster 2021.04, and SmartOS 20210923. A local unprivileged user can cause a deadlock and kernel panic via crafted rename and rmdir calls on tmpfs filesystems. Oracle...

CVE-2021-43395

An issue was discovered in illumos before f859e7171bb5db34321e45585839c6c3200ebb90, OmniOS Community Edition r151038, OpenIndiana Hipster 2021.04, and SmartOS 20210923. A local unprivileged user can cause a deadlock and kernel panic via crafted rename and rmdir calls on tmpfs filesystems. Oracle...

Design/Logic Flaw

An issue was discovered in illumos before f859e7171bb5db34321e45585839c6c3200ebb90, OmniOS Community Edition r151038, OpenIndiana Hipster 2021.04, and SmartOS 20210923. A local unprivileged user can cause a deadlock and kernel panic via crafted rename and rmdir calls on tmpfs filesystems. Oracle...

CVE-2021-43395

An issue was discovered in illumos before f859e7171bb5db34321e45585839c6c3200ebb90, OmniOS Community Edition r151038, OpenIndiana Hipster 2021.04, and SmartOS 20210923. A local unprivileged user can cause a deadlock and kernel panic via crafted rename and rmdir calls on tmpfs filesystems. Oracle...

CVE-2021-43395

An issue was discovered in illumos before f859e7171bb5db34321e45585839c6c3200ebb90, OmniOS Community Edition r151038, OpenIndiana Hipster 2021.04, and SmartOS 20210923. A local unprivileged user can cause a deadlock and kernel panic via crafted rename and rmdir calls on tmpfs filesystems. Oracle...

CVE-2021-43395

CVE-2021-43395 affects illumos before f859e7171bb5db34321e45585839c6c3200ebb90, OmniOS CE r151038, OpenIndiana Hipster 2021.04, and SmartOS 20210923, plus Oracle Solaris 10/11. The issue allows a local unprivileged user to trigger a deadlock and kernel panic by issuing crafted rename and rmdir op...

CVE-2021-43395: Improper Locking

An issue was discovered in illumos before f859e7171bb5db34321e45585839c6c3200ebb90, OmniOS Community Edition r151038, OpenIndiana Hipster 2021.04, and SmartOS 20210923. A local unprivileged user can cause a deadlock and kernel panic via crafted rename and rmdir calls on tmpfs filesystems. Oracle...

The vulnerability of the Filesystem component in Oracle Solaris allows a hacker to cause a service failure.

The vulnerability of the Filesystem component in Oracle Solaris is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the Ldoms component in the Oracle Solaris operating system allows a perpetrator to gain read access to data, obtain privileged access to infrastructure, or cause partial service interruption.

The vulnerability of the Ldoms component in the Oracle Solaris operating system is related to errors in the code. Exploiting this vulnerability can allow an attacker to gain read access to data, obtain privileged access to infrastructure resources, or cause partial service interruption...

Oracle Solaris has an unspecified vulnerability (CNVD-2023-05480)

Oracle Solaris, a UNIX operating system from Oracle Corporation, has a security vulnerability in Oracle Solaris versions 10 1/13 that stems from a vulnerability to privilege escalation when using the Common Desktop Environment CDE. An attacker with low privileges can escalate to root by creating ...

CVE-2022-43752

Oracle Solaris version 10 1/13, when using the Common Desktop Environment CDE, is vulnerable to a privilege escalation vulnerability. A low privileged user can escalate to root by crafting a malicious printer and double clicking on the the crafted printer's icon...

Privilege escalation

UNSUPPORTED WHEN ASSIGNED Oracle Solaris version 10 1/13, when using the Common Desktop Environment CDE, is vulnerable to a privilege escalation vulnerability. A low privileged user can escalate to root by crafting a malicious printer and double clicking on the the crafted printer's icon...

Oracle Solaris 安全漏洞

Oracle Solaris, a UNIX operating system from Oracle Corporation, has a security vulnerability in Oracle Solaris versions 10 1/13 that stems from a vulnerability to privilege escalation when using the Common Desktop Environment CDE. An attacker with low privileges can escalate to root by creating ...

CVE-2022-43752

Oracle Solaris version 10 1/13, when using the Common Desktop Environment CDE, is vulnerable to a privilege escalation vulnerability. A low privileged user can escalate to root by crafting a malicious printer and double clicking on the the crafted printer's icon...

CVE-2022-43752

CVE-2022-43752 affects Oracle Solaris 10 1/13 when using the Common Desktop Environment (CDE). A low-privilege user can escalate to root by creating a malicious printer and double-clicking the printer icon, as described across multiple sources. The vulnerability is local and involves the CDE prin...

PT-2022-6223 · Oracle · Common Desktop Environment +1

Name of the Vulnerable Software and Affected Versions: Oracle Solaris version 10 1/13 Description: The issue is a privilege escalation vulnerability that can be exploited by a low-privileged user to gain root access. This is achieved by crafting a malicious printer and double-clicking on the...

CVE-2022-43752: Buffer Copy without Checking Size of Input

Oracle Solaris version 10 1/13, when using the Common Desktop Environment CDE, is vulnerable to a privilege escalation vulnerability. A low privileged user can escalate to root by crafting a malicious printer and double clicking on the the crafted printer's icon...