The vulnerability of the Filesystem component in Oracle Solaris allows a hacker to trigger a service failure.

The vulnerability of the Filesystem component in Oracle Solaris is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to cause service failures...

openSUSE Security Update : java-11-openjdk (openSUSE-2020-1994)

"This update for java-11-openjdk fixes the following issues : - Update to upstream tag jdk-11.0.9-11 October 2020 CPU, bsc1177943 - New features + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector - Security fixes + JDK-8233624: Enhance JNI linkage + JDK-8236196: Improve string pooling ...

Release Information for Veeam Agent for Oracle Solaris 2.1

The latest version of Veeam Agent for Oracle Solaris can be found here: https://www.veeam.com/oracle-solaris-agent-download.html This update supersedes Veeam Agent for Oracle Solaris 2.0. Requirements Upgrade from v1 is not supported, clean installation is required. Upgrade from Veeam Agent for...

Oracle Solaris PAM parse_user_name() buffer overflow (CVE-2020-14871)

Binary data solarissshpamcve-2020-14871.nbin...

Oracle Solaris Buffer Overflow (CVE-2020-14871)

A buffer overflow vulnerability exists in Oracle Solaris. Successful exploitation of this vulnerability could result in a denial of service or execution of arbitrary code into the affected system...

In Wild Critical Buffer Overflow Vulnerability in Solaris Can Allow Remote Takeover — CVE-2020-14871

FireEye Mandiant has been investigating compromised Oracle Solaris machines in customer environments. During our investigations, we discovered an exploit tool on a customer’s system and analyzed it to see how it was attacking their Solaris environment. The FLARE team’s Offensive Task Force analyz...

Oracle Solaris Zero-Day Attack Revealed

A previously known threat group, called UNC1945, has been compromising telecommunications companies and targeting financial and professional consulting industries, by exploiting a security flaw in Oracle’s Solaris operating system. Researchers said that the group was exploiting the bug when it wa...

Live off the Land? How About Bringing Your Own Island? An Overview of UNC1945

Through Mandiant investigation of intrusions, the FLARE Advanced Practices team observed a group we track as UNC1945 compromise managed service providers and operate against a tailored set of targets within the financial and professional consulting industries by leveraging access to third-party...

Oracle Solaris Kernel License Issue Vulnerability (CNVD-2020-59221)

Oracle Solaris is a set of UNIX operating systems from Oracle. An authorization issue vulnerability exists in Oracle Solaris Kernel version 11, which can be exploited by an attacker to compromise Oracle Solaris infrastructure by allowing a low-privileged attacker to log in to Oracle Solaris and...

Oracle Solaris Remote Code Execution Vulnerability

Oracle Solaris is a UNIX operating system. A security vulnerability exists in the Oracle Solaris protocol handling, which allows remote attackers to exploit the vulnerability by submitting a special request that can be used to execute arbitrary code in the system context...

Vulnerabilities fixed in Oracle Solaris

Oracle has fixed several vulnerabilities in Solaris. By exploiting the vulnerabilities, an unauthorized malicious person can gain remote access to the system. It also allows local users bypass security measures or cause a denial-of-service. Oracle has released updates to fix the vulnerabilities...

Oracle Solaris Kernel License Issue Vulnerability

Oracle Solaris is a UNIX operating system from Oracle. Oracle Solaris Kernel version 11 contains an authorization issue vulnerability that can be exploited by a low-privileged attacker to compromise Oracle Solaris by logging in to Oracle Solaris and executing its infrastructure...

Oracle Solaris Utility Access Control Issue Vulnerability

Oracle Solaris is a UNIX operating system from Oracle. An Access Control Error vulnerability exists in Oracle Solaris Utility version 11, which can be exploited by an attacker with low privileges to compromise Oracle Solaris via SSH for network access...

Oracle Solaris Filesystem Authorization Issues Vulnerability

Oracle Solaris is a UNIX operating system from Oracle. An authorization issue vulnerability exists in Oracle Solaris Filesystem version 11 that could allow an attacker to compromise Oracle Solaris by allowing a less-privileged attacker to log in to the infrastructure on which Oracle Solaris is...

Oracle Kills 402 Bugs in Massive October Patch Update

Business software giant Oracle is urging customers to update their systems in the October release of its quarterly Critical Patch Update CPU, which fixes 402 vulnerabilities across various product families. Well over half 272 of these vulnerabilities open products up to remote exploitation withou...

CVE-2020-14871

Vulnerability in the Oracle Solaris product of Oracle Systems component: Pluggable authentication module. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Solaris...

CVE-2020-14871

Vulnerability in the Oracle Solaris product of Oracle Systems component: Pluggable authentication module. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Solaris...

CVE-2020-14818

Vulnerability in the Oracle Solaris product of Oracle Systems component: Utility. The supported version that is affected is 11. Difficult to exploit vulnerability allows low privileged attacker with network access via SSH to compromise Oracle Solaris. Successful attacks require human interaction...

CVE-2020-14818

Vulnerability in the Oracle Solaris product of Oracle Systems component: Utility. The supported version that is affected is 11. Difficult to exploit vulnerability allows low privileged attacker with network access via SSH to compromise Oracle Solaris. Successful attacks require human interaction...

CVE-2020-14758

Vulnerability in the Oracle Solaris product of Oracle Systems component: Kernel. The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful...