Code injection

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Smartcard Libraries. The supported version that is affected is 11.3. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise...

Code injection

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Zone. The supported version that is affected is 11.3. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successf...

Code injection

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Common Desktop Environment CDE. The supported version that is affected is 10. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to...

Code injection

Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite subcomponent: NAS device addition. The supported version that is affected is 4.3. Easily "exploitable" vulnerability allows unauthenticated attacker with logon to the infrastructure where Solaris Cluster executes ...

Code injection

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel Zones virtualized NIC driver. The supported version that is affected is 11.3. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise...

Design/Logic Flaw

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: RBAC. The supported version that is affected is 11.3. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successf...

CVE-2017-3510

CVE-2017-3510 affects Oracle Solaris 11.3, specifically the Kernel Zones virtualized NIC driver. The vulnerability enables a low-privilege, network-accessible attacker to compromise Solaris, potentially leading to unauthorized creation, deletion, or modification of data. The issue is addressed in...

CVE-2017-3551

CVE-2017-3551 affects Oracle Solaris 11.3 Smartcard Libraries. It is a local, low-privilege condition that can lead to Solaris hang/crash (DOS) and unauthorized read/update/delete of data. CVSSv3 base score 6.6 (AV:L, AC:L, PR:L, UI:N, C:L/I:L/A:H). Remediation is referenced in the APR2017 CPU ad...

CVE-2017-3565

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: RBAC. The supported version that is affected is 11.3. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successf...

CVE-2017-3474

CVE-2017-3474 affects the Solaris component Zone in Oracle Solaris 11.3. The vulnerability enables a low-privilege, local attacker with logon to the Solaris host to compromise confidentiality by unauthorized read access to a subset of Solaris data. The CVSS v3.0 metrics indicate a low impact (C:L...

CVE-2017-3498

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. The supported version that is affected is 11.3. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris...

CVE-2017-3498

Summary: CVE-2017-3498 affects Oracle Solaris 11.3 in the Kernel subcomponent. It is a local, low-privilege vulnerability that could allow an attacker with logon to access a subset of Solaris data (no code execution described). The CVSSv3 base score is 3.3 (Low) with confidentiality impact. Affec...

CVE-2017-3497

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Remote Administration Daemon. The supported version that is affected is 11.3. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise...

CVE-2017-3497

Affected product: Oracle Solaris 11.3 (Solaris component of Oracle Sun Systems Products Suite), subcomponent Remote Administration Daemon. Root cause and impact per CNVD/NVD: unauthenticated attacker over network can read, update, insert, or delete Solaris data, and cause partial DOS; CVSSv3 base...

CVE-2016-5551

Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite subcomponent: NAS device addition. The supported version that is affected is 4.3. Easily "exploitable" vulnerability allows unauthenticated attacker with logon to the infrastructure where Solaris Cluster executes ...

CVE-2017-3623

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel RPC. For supported versions that are affected see note. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Solaris. While the...

CVE-2016-5551

Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite subcomponent: NAS device addition. The supported version that is affected is 4.3. Easily "exploitable" vulnerability allows unauthenticated attacker with logon to the infrastructure where Solaris Cluster executes ...

CVE-2017-3510

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel Zones virtualized NIC driver. The supported version that is affected is 11.3. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise...

CVE-2017-3516

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel Zones virtualized NIC driver. The supported version that is affected is 11.3. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise...

CVE-2017-3516

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel Zones virtualized NIC driver. The supported version that is affected is 11.3. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise...