CVE-2017-10003

Affected software: Oracle Solaris (Solaris 10 on x86 and SPARC). Component: Network Services Library of the Sun Systems Products Suite. Root cause / vulnerability detail: Local vulnerability that allows a low-privileged user with logon to the Solaris host to access or modify Solaris data (unautho...

CVE-2017-10234

Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite subcomponent: NAS device addition. The supported version that is affected is 4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris Cluster executes to...

CVE-2017-10062

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Oracle Java Web Console. The supported version that is affected is 10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise...

CVE-2017-10036

CVE-2017-10036 is a vulnerability in the Solaris component of Oracle Sun Systems Products Suite (NFSv4) affecting Solaris 10 and 11. The issue allows an unauthenticated attacker with network access via NFSv4 to compromise Solaris, with the impact described as a hang or a frequently repeatable cra...

CVE-2017-10013

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: User Interface. The supported version that is affected is AK 2013. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Sun Z...

CVE-2017-10013

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: User Interface. The supported version that is affected is AK 2013. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Sun Z...

Oracle Solaris Remote Vulnerability (CNVD-2017-24337)

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is a Unix-like operating system. A security vulnerability exists in the Kernel subcomponent of the Solaris component of Oracle Sun Systems Products Suite, versions 10 and 11. A local...

Oracle Sun Systems Products Suite Sun ZFS Storage Appliance Kit Remote Vulnerability

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation.Sun ZFS Storage Appliance Kit AK is one of the ZFS storage appliance kits. A security vulnerability exists in the User Interface subcomponent of the Sun ZFS Storage AK component in Oracle Sun Systems...

Oracle Solaris Critical Patch Update : jul2017_SRU11_3_9_4_0

This Solaris system is missing necessary patches to address a critical security update : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: IKE. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated...

Code injection

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris...

CVE-2017-3629

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris...

CVE-2017-3631

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful...

CVE-2017-3631

CVE-2017-3631 is a local privilege-escalation vulnerability in the Solaris kernel component affecting Solaris 11.x. The available description confirms a vulnerable kernel path enabling a low-privilege user with logon to Solaris to compromise the system, with a CVSS v3 base score of 5.3 (Impact on...

CVE-2017-3630

CVE-2017-3630 affects Oracle Solaris Kernel (Solaris 10/11). The issue is described as a Stack Clash due to an insufficiently sized stack guard page on unpatched Solaris, enabling a local user with logon to escalate privileges via RSH and compromise Solaris data integrity/readability or cause par...

CVE-2017-3629

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris...

CVE-2017-3629

CVE-2017-3629 affects the Solaris kernel in Oracle Sun Systems Products Suite, with patched/affected versions 10 and 11. The vulnerability is a local, kernel-level issue that enables a low-privilege user with logon to compromise Solaris, potentially leading to a full takeover of the system. Explo...

Oracle Sun Systems Products Suite Solaris Local Elevation of Privilege Vulnerability

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is a Unix-like operating system. A local lift vulnerability exists in the Kernel subcomponent of the Solaris component version 11 of the Oracle Sun Systems Products Suite. An attacker...

Oracle Sun ZFS Storage Appliance Kit Unauthorized Operation Vulnerability

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation.Sun ZFS Storage Appliance Kit AK is one of the ZFS storage appliance kits. A security vulnerability exists in the User Interface subsystem subcomponent of the Sun ZFS Storage AK component in Oracle Sun...

Oracle Solaris Remote Vulnerability (CNVD-2017-06323)

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is a Unix-like operating system. A security vulnerability exists in the Remote Administration Daemon subcomponent of the Solaris component of Oracle Sun Systems Products Suite, version...

CVE-2017-3621

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: IPC Frameworks. The supported version that is affected is AK 2013. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via multiple protocols to...