731 matches found
CVE-2017-3623
CVE-2017-3623 is referenced in connected materials as EBBSHAVE/EBBISLAND RPC buffer overflow affecting IBM AIX on PPC. Public exploit entries (Exploit-DB) cite remote code execution via RPC, targeting IBM AIX PPC versions 6100-09-04-1441, 7100-03-05-1524, 7100-04-00-0000, 7200-01-01-1642. No offi...
CVE-2017-3516
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel Zones virtualized NIC driver. The supported version that is affected is 11.3. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise...
CVE-2017-3623
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel RPC. For supported versions that are affected see note. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Solaris. While the...
CVE-2017-3564
CVE-2017-3564 affects Oracle Solaris 11.3 RBAC in the Solaris kernel/RBAC implementation. A local, low-privilege attacker with logon and required user interaction can compromise Solaris, potentially leading to takeover of the system and high-impact outcomes (C/H/I/A = 8.2/3.0). The vulnerability ...
CVE-2017-3564
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: RBAC. The supported version that is affected is 11.3. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successf...
CVE-2017-3516
CVE-2017-3516 affects Oracle Solaris 11.3, specifically the Kernel Zones virtualized NIC driver in the Solaris component of Oracle Sun Systems Products Suite. An attacker with low privileges who has network access could exploit this to cause a hang or frequent, repeatable crashes (complete DOS). ...
CVE-2017-3497
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Remote Administration Daemon. The supported version that is affected is 11.3. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise...
CVE-2017-3584
Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: RAS subsystems. The supported version that is affected is AK 2013. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Sun ZFS...
CVE-2017-3565
CVE-2017-3565 affects Oracle Solaris 11.3, under the RBAC component. The connected sources describe a local, low-privilege vulnerability in Solaris 11.3 that allows an attacker with logon access to compromise Solaris, with attacks requiring user interaction and potentially leading to unauthorized...
CVE-2017-3622
CVE-2017-3622 originally describes a local privilege-escalation in Solaris CDE (EXTREMEPARR) affecting Solaris 10; the related exploitability details show a directory-traversal in dtappgather that allows a local user to create a user-owned directory and, via loading a shared object, gain root pri...
CVE-2017-3474
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Zone. The supported version that is affected is 11.3. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successf...
CVE-2017-3276
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel Zones virtualized block driver. The supported version that is affected is 11.3. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Solaris execut...
Design/Logic Flaw
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel Zones virtualized block driver. The supported version that is affected is 11.3. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Solaris execut...
CVE-2016-8330
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. The supported version that is affected is 11.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Solaris. Successful attacks...
CVE-2017-3301
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. The supported version that is affected is 11.3. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Solaris executes to compromise Solaris...
CVE-2017-3276
Vulnerability CVE-2017-3276 affects Oracle Solaris 11.3 in the Kernel Zones virtualized block driver component. The root cause is a local vulnerability in the Kernel Zones subcomponent that could be exploited by a high-privilege attacker with logon to the Solaris host to compromise the system. Im...
CVE-2017-3301
CVE-2017-3301 affects the Solaris kernel in Oracle Sun Systems Products Suite, with affected version 11.3 per NVD/NVD-related entries. The vulnerability is described as local and requires a user to log on to the Solaris host, with the attacker able to cause unauthorized updates/inserts/deletes to...
CVE-2017-3242
Vulnerability in the Oracle VM Server for Sparc component of Oracle Sun Systems Products Suite subcomponent: LDOM Manager. Supported versions that are affected are 3.2 and 3.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM Server...
CVE-2017-3242
CVE-2017-3242 affects Oracle VM Server for Sparc (LDOM Manager subcomponent). Affected: 3.2 and 3.4. Vulnerability allows a low-privileged user with logon to the infrastructure to compromise the server; successful attacks require user interaction and may cause a hang or frequent crashes (partial/...
CVE-2017-3301
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. The supported version that is affected is 11.3. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Solaris executes to compromise Solaris...