PT-2025-4273 · Oracle · Oracle Solaris

Published 2025-01-21 · Updated 2025-01-21 · CVE-2025-21551

Positive Technologies (AI Summary)

CVSS v2.0

6.2

Medium

Base vector

AV:L/AC:L/Au:S/C:N/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11

Description The issue allows a high-privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks can result in unauthorized creation, deletion, or modification access to critical data or all Oracle Solaris accessible data and unauthorized ability to cause a hang or frequently repeatable crash of Oracle Solaris.

Recommendations For Oracle Solaris version 11, there is no information about a newer version that contains a fix for this issue.

Fix

Out of bounds Read

Incorrect Permission

Weakness Enumeration

CWE-125

CWE-732

Related Identifiers

BDU:2025-02397

CVE-2025-21551

Affected Products

Oracle Solaris

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-21551 · Security Note
• https://bdu.fstec.ru/vul/2025-02397 · Security Note
• https://oracle.com/security-alerts/cpujan2025.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-21551 · Vendor Advisory
• https://twitter.com/CVEnew/status/1881821731918413913 · Twitter Post
• https://cybersecurity-help.cz/vulnerabilities/103218 · Note