PT-2014-3614 · Oracle · Oracle Solaris+1

Published 2014-10-06 · Updated 2017-08-29 · CVE-2014-0397

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle Solaris versions 10 and 11.1

Description The issue is related to "Buffer errors" in libXtsol, with unspecified impact and attack vectors.

Recommendations For Oracle Solaris version 10, at the moment, there is no information about a newer version that contains a fix for this issue. For Oracle Solaris version 11.1, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2014-0397

Affected Products

Oracle Solaris

Libxtsol

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2014-0397 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/91482 · Note
• http://securityfocus.com/bid/65819 · Note
• https://blogs.oracle.com/sunsecurity/entry/cve_2014_0397_buffer_errors · Note