PT-2016-1095 · Oracle · Solaris

Published 2016-01-19 · Updated 2016-12-07 · CVE-2016-0535

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Oracle Sun Solaris versions 10 and 11

Description The issue is related to errors in the code of the RPC subcomponent in the Solaris operating system. It allows remote attackers to affect availability via vectors related to RPC, potentially leading to a partial denial of service by calling remote procedures.

Recommendations For Oracle Sun Solaris versions 10 and 11, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Weakness Enumeration

CWE-17

Related Identifiers

BDU:2016-00167

CVE-2016-0535

Affected Products

Solaris

References · 5

• http://oracle.com/technetwork/topics/security/cpujan2016-2367955.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-0535 · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-00167 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2016-0535 · Security Note
• http://securitytracker.com/id/1034735 · Note