PT-2019-1221 · Oracle · Oracle Solaris

Publicado 2019-01-14 · Atualizado 2020-08-24 · CVE-2019-2437

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11

Description The issue is related to inadequate access control in the Oracle Solaris kernel, allowing an unauthenticated attacker with network access via TCP to compromise Oracle Solaris. Successful attacks can result in the unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Solaris.

Recommendations For Oracle Solaris version 11, apply the necessary patches or updates to fix the vulnerability in the kernel component. As a temporary workaround, consider restricting network access via TCP to minimize the risk of exploitation.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

BDU:2019-00334

CVE-2019-2437

Produtos afetados

Oracle Solaris

Referências · 6

• https://oracle.com/technetwork/security-advisory/cpujan2019-5072801.html · Nota
• http://securityfocus.com/bid/106589 · Nota
• https://osv.dev/vulnerability/CVE-2019-2437 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2019-00334 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2019-2437 · Nota de Segurança
• http://oracle.com/technetwork/security-advisory/cpujan2019-5072801.html · Aviso do Fabricante