PT-2022-3777 · Oracle · Oracle Solaris

Published 2022-07-19 · Updated 2022-07-23 · CVE-2022-21514

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11

Description The issue is related to the Remote Administration Daemon component and is caused by resource release errors. It allows an unauthenticated attacker with network access via multiple protocols to compromise Oracle Solaris, resulting in the ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Solaris.

Recommendations For Oracle Solaris version 11, consider disabling the Remote Administration Daemon component until a patch is available to prevent exploitation. Restrict access to the affected component to minimize the risk of a denial-of-service attack.

Fix

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

BDU:2022-04569

CVE-2022-21514

Affected Products

Oracle Solaris

References · 6

• https://oracle.com/security-alerts/cpujul2022.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-21514 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-21514 · Security Note
• https://bdu.fstec.ru/vul/2022-04569 · Security Note
• https://t.me/cvenotify/33658 · Telegram Post
• https://vuldb.com/?id.204530 · Note