PT-2023-2660 · Oracle · Oracle Solaris

CVE-2023-21948 · Publicado 2023-04-18 · Atualizado 2023-04-19

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 10

Description The issue is related to errors in processing input data in the Core component of the Oracle Solaris operating system. Exploitation of this issue can allow an attacker to execute arbitrary code, potentially leading to the takeover of Oracle Solaris. The vulnerability is easily exploitable and can be compromised by a low-privileged attacker with logon access to the infrastructure where Oracle Solaris is executed.

Recommendations For Oracle Solaris version 10, update to a version that includes the fix for this issue to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2023-02500

CVE-2023-21948

Produtos afetados

Oracle Solaris

Referências · 5

• https://osv.dev/vulnerability/CVE-2023-21948 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-21948 · Nota de Segurança
• https://bdu.fstec.ru/vul/2023-02500 · Nota de Segurança
• https://oracle.com/security-alerts/cpuapr2023.html · Aviso do Fabricante
• https://t.me/cibsecurity/62409 · Publicação no Telegram