PT-2020-1451 · Oracle · Oracle Solaris

Published 2020-01-14 · Updated 2022-04-29 · CVE-2020-2578

Positive Technologies (AI Summary)

CVSS v3.1

5.8

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11

Description The issue is related to a kernel vulnerability in Oracle Solaris, which can be exploited by an unauthenticated attacker with network access via SMB. This vulnerability may impact additional products and can result in a partial denial of service (DOS) of Oracle Solaris. The vulnerability is associated with resource release errors.

Recommendations For Oracle Solaris version 11, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

BDU:2020-00434

CVE-2020-2578

Affected Products

Oracle Solaris

References · 6

• https://oracle.com/security-alerts/cpujan2020.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-2578 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-2578 · Security Note
• https://bdu.fstec.ru/vul/2020-00434 · Security Note
• https://oracle.com/security-alerts/public-vuln-to-advisory-mapping.html · Note
• https://vuldb.com/?id.148977 · Note