PT-2020-1400 · Oracle · Oracle Solaris

Published 2020-01-15 · Updated 2022-07-08 · CVE-2020-2680

Positive Technologies (AI Summary)

CVSS v3.1

6.0

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11

Description The issue is related to a component in the Filesystem of Oracle Solaris, which can be exploited by a high-privileged attacker with logon access to the infrastructure. This can lead to a denial of service (DOS) due to the ability to cause a hang or frequently repeatable crash of Oracle Solaris. The vulnerability is associated with errors in resource release.

Recommendations For Oracle Solaris version 11, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

BDU:2020-00373

CVE-2020-2680

Affected Products

Oracle Solaris

References · 6

• https://osv.dev/vulnerability/CVE-2020-2680 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-00373 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-2680 · Security Note
• https://oracle.com/security-alerts/cpujan2020.html · Vendor Advisory
• https://oracle.com/security-alerts/public-vuln-to-advisory-mapping.html · Note
• https://vuldb.com/?id.148975 · Note