CVE-2017-3621

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: IPC Frameworks. The supported version that is affected is AK 2013. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via multiple protocols to...

CVE-2017-3582

Vulnerability in the Oracle SuperCluster Specific Software component of Oracle Sun Systems Products Suite subcomponent: Backup/Restore Utility. Supported versions that are affected are 2.3.8 and 2.3.13. Easily "exploitable" vulnerability allows unauthenticated attacker with logon to the...

CVE-2017-3584

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: RAS subsystems. The supported version that is affected is AK 2013. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Sun ZFS...

Code injection

Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite subcomponent: NAS device addition. The supported version that is affected is 4.3. Easily "exploitable" vulnerability allows unauthenticated attacker with logon to the infrastructure where Solaris Cluster executes ...

Code injection

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel RPC. For supported versions that are affected see note. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Solaris. While the...

CVE-2016-5551

Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite subcomponent: NAS device addition. The supported version that is affected is 4.3. Easily "exploitable" vulnerability allows unauthenticated attacker with logon to the infrastructure where Solaris Cluster executes ...

Code injection

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Smartcard Libraries. The supported version that is affected is 11.3. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise...

CVE-2017-3498

Summary: CVE-2017-3498 affects Oracle Solaris 11.3 in the Kernel subcomponent. It is a local, low-privilege vulnerability that could allow an attacker with logon to access a subset of Solaris data (no code execution described). The CVSSv3 base score is 3.3 (Low) with confidentiality impact. Affec...

CVE-2017-3516

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel Zones virtualized NIC driver. The supported version that is affected is 11.3. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise...

CVE-2017-3474

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Zone. The supported version that is affected is 11.3. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successf...

CVE-2017-3564

CVE-2017-3564 affects Oracle Solaris 11.3 RBAC in the Solaris kernel/RBAC implementation. A local, low-privilege attacker with logon and required user interaction can compromise Solaris, potentially leading to takeover of the system and high-impact outcomes (C/H/I/A = 8.2/3.0). The vulnerability ...

CVE-2017-3623

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel RPC. For supported versions that are affected see note. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Solaris. While the...

CVE-2017-3516

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel Zones virtualized NIC driver. The supported version that is affected is 11.3. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise...

CVE-2017-3584

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: RAS subsystems. The supported version that is affected is AK 2013. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Sun ZFS...

CVE-2017-3623

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel RPC. For supported versions that are affected see note. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Solaris. While the...

CVE-2016-5551

Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite subcomponent: NAS device addition. The supported version that is affected is 4.3. Easily "exploitable" vulnerability allows unauthenticated attacker with logon to the infrastructure where Solaris Cluster executes ...

CVE-2017-3622

CVE-2017-3622 originally describes a local privilege-escalation in Solaris CDE (EXTREMEPARR) affecting Solaris 10; the related exploitability details show a directory-traversal in dtappgather that allows a local user to create a user-owned directory and, via loading a shared object, gain root pri...

CVE-2017-3623

CVE-2017-3623 is referenced in connected materials as EBBSHAVE/EBBISLAND RPC buffer overflow affecting IBM AIX on PPC. Public exploit entries (Exploit-DB) cite remote code execution via RPC, targeting IBM AIX PPC versions 6100-09-04-1441, 7100-03-05-1524, 7100-04-00-0000, 7200-01-01-1642. No offi...

CVE-2017-3564

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: RBAC. The supported version that is affected is 11.3. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successf...

CVE-2017-3497

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Remote Administration Daemon. The supported version that is affected is 11.3. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise...