PT-2017-15946 · Oracle · Solaris

Published 2017-04-24 · Updated 2019-10-03 · CVE-2017-3510

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite version 11.3

Description The issue affects the Kernel Zones virtualized NIC driver in the Solaris component, allowing a low-privileged attacker with network access via multiple protocols to compromise Solaris. This can result in unauthorized creation, deletion, or modification access to critical data or all Solaris accessible data. The impact of successful attacks may extend beyond Solaris to other products.

Recommendations For version 11.3, update to a version that includes the fix for this issue to prevent exploitation.

Fix

Related Identifiers

CVE-2017-3510

Affected Products

Solaris

References · 5

• https://osv.dev/vulnerability/CVE-2017-3510 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-3510 · Security Note
• http://oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html · Vendor Advisory
• http://securityfocus.com/bid/97813 · Note
• http://securitytracker.com/id/1038292 · Note