Solaris

CVEs (725)

• CVE-2017-3276MedJan 27, 2017
  Oracle Corporation

  Solaris
  risk 0.37cvss 5.7epss 0.00

  Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel Zones virtualized block driver). The supported version that is affected is 11.3. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure…

• CVE-2018-2577MedJan 18, 2018
  Oracle Corporation

  Solaris
  risk 0.36cvss 5.5epss 0.00

  Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to…

• CVE-2016-5576MedOct 25, 2016
  Oracle Corporation

  Solaris
  risk 0.36cvss 5.5epss 0.00

  Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect availability via vectors related to Kernel Zones.

• CVE-2016-5471MedJul 21, 2016
  Oracle Corporation

  Solaris
  risk 0.36cvss 5.5epss 0.00

  Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect availability via vectors related to Kernel, a different vulnerability than CVE-2016-3497 and CVE-2016-5469.

• CVE-2016-5469MedJul 21, 2016
  Oracle Corporation

  Solaris
  risk 0.36cvss 5.5epss 0.00

  Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect availability via vectors related to Kernel, a different vulnerability than CVE-2016-3497 and CVE-2016-5471.

• CVE-2016-5452MedJul 21, 2016
  Oracle Corporation

  Solaris
  risk 0.36cvss 5.5epss 0.00

  Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect confidentiality via vectors related to Verified Boot.

• CVE-2016-3497MedJul 21, 2016
  Oracle Corporation

  Solaris
  risk 0.36cvss 5.5epss 0.00

  Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect availability via vectors related to Kernel, a different vulnerability than CVE-2016-5469 and CVE-2016-5471.

• CVE-2016-3453MedJul 21, 2016
  Oracle Corporation

  Solaris
  risk 0.36cvss 5.5epss 0.00

  Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect availability via vectors related to Kernel.

• CVE-2016-4956MedJul 5, 2016
  NTP

  NTP
  risk 0.36cvss 5.3epss 0.16

  ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (interleaved-mode transition and time change) via a spoofed broadcast packet. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-1548.

• CVE-2016-2178MedJun 20, 2016
  OpenSSL Project

  OpenSSL
  risk 0.36cvss 5.5epss 0.01

  The dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly ensure the use of constant-time operations, which makes it easier for local users to discover a DSA private key via a timing side-channel attack.

• CVE-2016-3465MedApr 21, 2016
  Oracle Corporation

  Solaris
  risk 0.36cvss 5.5epss 0.00

  Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect availability via vectors related to ZFS.

• CVE-2016-3462MedApr 21, 2016
  Oracle Corporation

  Solaris
  risk 0.36cvss 5.5epss 0.00

  Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect availability via vectors related to Network Configuration Service.

• CVE-2009-2857MedAug 19, 2009
  Sun Corporation

  Solaris
  risk 0.36cvss 5.5epss 0.00

  The kernel in Sun Solaris 8, 9, and 10, and OpenSolaris before snv_103, does not properly handle interaction between the filesystem and virtual-memory implementations, which allows local users to cause a denial of service (deadlock and system halt) via vectors involving mmap and…

• CVE-2016-5566MedOct 25, 2016
  Oracle Corporation

  Solaris
  risk 0.35cvss 5.3epss 0.02

  Unspecified vulnerability in Oracle Sun Solaris 11.3 allows remote attackers to affect confidentiality via unknown vectors.

• CVE-2015-5295MedJan 20, 2016
  OpenStack

  Orchestration API
  risk 0.35cvss 5.4epss 0.03

  The template-validate command in OpenStack Orchestration API (Heat) before 2015.1.3 (kilo) and 5.0.x before 5.0.1 (liberty) allows remote authenticated users to cause a denial of service (memory consumption) or determine the existence of local files via the resource type in a…

• CVE-2017-10062MedAug 8, 2017
  Oracle Corporation

  Solaris
  risk 0.34cvss 5.3epss 0.00

  Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Oracle Java Web Console). The supported version that is affected is 10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris…

• CVE-2016-5487MedOct 25, 2016
  Oracle Corporation

  Solaris
  risk 0.34cvss 5.3epss 0.00

  Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect confidentiality, integrity, and availability via unknown vectors.

• CVE-2018-2808MedApr 19, 2018
  Oracle Corporation

  Solaris
  risk 0.33cvss 5.0epss 0.00

  Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to…

• CVE-2018-2560MedJan 18, 2018
  Oracle Corporation

  Solaris
  risk 0.33cvss 5.0epss 0.00

  Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 11.3. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Solaris executes to…

• CVE-2016-5553MedOct 25, 2016
  Oracle Corporation

  Solaris
  risk 0.33cvss 5.0epss 0.00

  Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect availability via unknown vectors.