PT-2017-15946 · Oracle · Solaris

Publicado 2017-04-24 · Atualizado 2019-10-03 · CVE-2017-3510

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Crítica

Vetor base

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite version 11.3

Description The issue affects the Kernel Zones virtualized NIC driver in the Solaris component, allowing a low-privileged attacker with network access via multiple protocols to compromise Solaris. This can result in unauthorized creation, deletion, or modification access to critical data or all Solaris accessible data. The impact of successful attacks may extend beyond Solaris to other products.

Recommendations For version 11.3, update to a version that includes the fix for this issue to prevent exploitation.

Correção

Identificadores relacionados

CVE-2017-3510

Produtos afetados

Solaris

Referências · 5

• https://osv.dev/vulnerability/CVE-2017-3510 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-3510 · Nota de Segurança
• http://securityfocus.com/bid/97813 · Nota
• http://securitytracker.com/id/1038292 · Nota
• http://oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html · Aviso do Fabricante