CVE-2018-2763

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: NTPD. The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful...

CVE-2018-2753

CVE-2018-2753 affects Oracle Solaris (Solaris component of Oracle Sun Systems Products Suite), specifically the Python modules subcomponent in Solaris 11.3. The root cause is a vulnerability in the Python modules that allows a low-privileged, logon-attached attacker to compromise Solaris, with us...

CVE-2018-2822

Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite subcomponent: Cluster Geo. The supported version that is affected is 4.3. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris Cluster executes to compromi...

CVE-2018-2857

CVE-2018-2857 affects the Sun ZFS Storage Appliance Kit (AK) HTTP data path subsystem in Oracle Sun Systems Products Suite, with versions before 8.7.17 vulnerable. The issue allows a network-authenticated, low-privilege attacker to perform unauthorized read, update, insert, or delete operations o...

CVE-2018-2858

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: HTTP data path subsystems. The supported version that is affected is Prior to 8.7.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2018-2764

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via NFS to compromise Solaris. Successful attacks of this...

CVE-2018-2857

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: HTTP data path subsystems. The supported version that is affected is Prior to 8.7.17. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2018-2863

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: API frameworks. The supported version that is affected is Prior to 8.7.17. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2018-2808

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successf...

CVE-2018-2863

CVE-2018-2863 affects Oracle Sun Systems Products Suite’s Sun ZFS Storage Appliance Kit (AK) in the API frameworks subcomponent. The vulnerability is present in versions prior to 8.7.17 and can be triggered by a low-privileged user with network access over HTTP, potentially leading to unauthorize...

CVE-2018-2563

CVE-2018-2563 affects the Solaris LDAP Library in Oracle Sun Systems Products Suite, specifically the Solaris 10 and 11.3 releases. The root cause enables a low-privilege, network-access attacker (via LDAP) to compromise Solaris data: unauthorized updates/inserts/deletes and unauthorized reads of...

CVE-2018-2792

CVE-2018-2792 affects the Hardware Management Pack component of Oracle Sun Systems Products Suite, specifically the Ipmitool subcomponent. The affected line is versions prior to 2.4.3. The vulnerability allows a high-privilege attacker with network access via multiple protocols to compromise the ...

CVE-2018-2792

Vulnerability in the Hardware Management Pack component of Oracle Sun Systems Products Suite subcomponent: Ipmitool. The supported version that is affected is Prior to 2.4.3. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise...

CVE-2018-2764

CVE-2018-2764 affects the Solaris kernel: vulnerable in Solaris on supported 10 and 11.3 systems, exploitable via network access to Solaris over NFS, leading to possible hang or complete denial of service. CVSS 3.0 base score 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). The advisory context from th...

CVE-2018-2808

CVE-2018-2808 affects the Solaris Kernel in Oracle Sun Systems Products Suite (for example, Solaris 11.3). The vulnerability enables a low-privileged user who can log into the system to compromise Solaris, with successful attacks potentially causing a hang or a frequently repeatable crash (comple...

CVE-2018-2718

CVE-2018-2718 affects the Solaris component of Oracle Sun Systems Product Suite (RPC). Affected: Solaris 10 and 11.3. Vulnerability allows an unauthenticated attacker who can access the host over NFS to cause a hang or a frequently repeatable crash (complete DoS). CVSS 3.0 base score 7.5 (Availab...

CVE-2018-2718

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: RPC. Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via NFS to compromise Solaris. Successful attacks of this...

CVE-2018-2718

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: RPC. Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via NFS to compromise Solaris. Successful attacks of this...

CVE-2018-2753

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Python modules. The supported version that is affected is 11.3. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris...

CVE-2018-2863

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: API frameworks. The supported version that is affected is Prior to 8.7.17. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...