PT-2022-3778 · Oracle · Oracle Solaris

Published 2022-07-19 · Updated 2022-07-23 · CVE-2022-21533

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11

Description The issue is related to errors in resource release in the SMB Server component of Oracle Solaris. It can be exploited to cause a denial of service, allowing an attacker to crash or hang the system. The vulnerability can be exploited by a low-privileged attacker with logon access to the infrastructure where Oracle Solaris is running.

Recommendations For Oracle Solaris version 11, apply the necessary patches or updates to fix the resource release errors in the SMB Server component. As a temporary workaround, consider restricting access to the SMB Server to minimize the risk of exploitation.

Fix

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

BDU:2022-04570

CVE-2022-21533

Affected Products

Oracle Solaris

References · 5

• https://osv.dev/vulnerability/CVE-2022-21533 · Vendor Advisory
• https://oracle.com/security-alerts/cpujul2022.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-21533 · Security Note
• https://bdu.fstec.ru/vul/2022-04570 · Security Note
• https://vuldb.com/ru/?id.204531 · Note