CVE-2019-2820

CVE-2019-2820 affects Oracle Solaris 11.4 (Oracle Sun Systems Products Suite) in the Gnuplot subcomponent. The vulnerability description indicates a low-privileged, logon-based attacker can compromise Oracle Solaris, with exploitation requiring user interaction and potentially leading to takeover...

CVE-2019-2804

CVE-2019-2804 affects Oracle Solaris filesystem on 11.4 and 10. Exploitation requires a logon and user interaction; successful attacks can lead to takeover of Oracle Solaris. CVSSv3.0 base score 7.3. Remediation is available via the JUL2019 patch update (e.g., SRU11_4_8_5_0) addressing this vulne...

CVE-2019-2788

CVE-2019-2788 affects Oracle Solaris 11.4 in the Open Fabrics Tools subcomponent. It enables a local, unauthenticated attacker with logon to the Solaris host to compromise the system, with required user interaction and potential for unauthorized data creation/deletion/modification and a complete ...

CVE-2019-2787

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite subcomponent: Automount. Supported versions that are affected are 11.4 and 10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via NFS to compromise Oracle Solaris. Successful...

CVE-2019-2788

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Open Fabrics Tools. The supported version that is affected is 11.4. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Solaris executes to compromise...

CVE-2019-2787

CVE-2019-2787 affects Oracle Solaris Automount (component Automount) on Solaris 11.4 and 10. Exploitation requires network access via NFS and is unauthenticated, with user interaction required. Impact: unauthorized update/insert/delete and read access to Solaris data. Base score CVSSv3.0 4.2 (MED...

Oracle Sun Systems Products Suite Solaris Component Denial of Service Vulnerability (CNVD-2019-23540)

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is one of the computer operating system components. A security vulnerability exists in the Open Fabrics Tools subcomponent of the Solaris component of Oracle Sun Systems Products Suite,...

Oracle Sun Systems Products Suite Sun ZFS Storage Appliance Kit Component Access Control Error Vulnerability

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation.Sun ZFS Storage Appliance Kit AK is one of the ZFS storage appliance kits. A security vulnerability exists in the HTTP data path subsystems subcomponent of the Sun ZFS Storage AK component version 8.8.3 i...

Oracle Solaris Critical Patch Update : jul2019_SRU11_4_10_3_0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Oracle Solaris product of Oracle Sun Systems Products Suite component: Zones. The supported version that is affected is 11.4. Easily exploitable vulnerability allows low privileged...

Solaris 10 (sparc) : 153056-01

Vulnerability in the Oracle Solaris product of Oracle Sun Systems Products Suite component: Filesystem. Supported versions that are affected are 11.4 and 10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromis...

Solaris 10 (sparc) : 153060-01

Vulnerability in the Oracle Solaris product of Oracle Sun Systems Products Suite component: Common Desktop Environment. The supported version that is affected is 10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to...

Solaris 10 (x86) : 150380-02

Vulnerability in the Oracle Solaris product of Oracle Sun Systems Products Suite component: Automount. Supported versions that are affected are 11.4 and 10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via NFS to compromise Oracle Solaris. Successful...

Solaris 10 (x86) : 153061-01

Vulnerability in the Oracle Solaris product of Oracle Sun Systems Products Suite component: Common Desktop Environment. The supported version that is affected is 10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to...

CVE-2019-2704

CVE-2019-2704 affects Oracle Solaris IPS Package Manager (IPS) on Solaris 11. An information disclosure vulnerability exists allowing an unauthenticated, network-reachable attacker (via HTTP) to read a subset of Solaris data. Multiple connected feeds corroborate the description across Red Hat, NV...

CVE-2019-2577

CVE-2019-2577 affects Oracle Solaris 11, specifically the File Locking Services subcomponent. The vulnerability can be exploited locally by a low-privilege user with logon to the affected Solaris host, potentially causing a partial denial of service. CVSS v3.0 base score is 3.3 (LOW) with a LOCAL...

Oracle Sun Systems Products Suite Solaris Component Information Disclosure Vulnerability

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is one of the computer operating system components. An information disclosure vulnerability exists in the Oracle Sun Systems Products Suite Solaris component. An attacker could exploit...

Oracle Solaris Critical Patch Update : apr2019_SRU11_4_8_5_0

This Solaris system is missing necessary patches to address a critical security update : - Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite subcomponent: IPS Package Manager. The supported version that is affected is 11. Easily exploitable vulnerability allows...

Code injection

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. The supported version that is affected is 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Solaris. Successful attacks of...

Code injection

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: Object Store. The supported version that is affected is prior to 8.8.2. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Sun...

CVE-2019-2543

CVE-2019-2543 affects Oracle Solaris kernel in Solaris 10 and 11. The vulnerability allows unauthenticated network access via KSSL to potentially read a subset of Solaris data. Documents specify affected component (Kernel) and versions (10/11) and cite CVSS 3.0 base score 5.3 (confidentiality imp...