CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
---|---|---|
6.5 | $0-$5k | 0.00 |
A vulnerability, which was classified as critical, was found in Oracle Solaris 8 (Operating System). Affected is an unknown function of the component TCP/IP. The manipulation with an unknown input leads to a denial of service vulnerability. CWE is classifying the issue as CWE-404. The product does not release or incorrectly releases a resource before it is made available for re-use. This is going to have an impact on availability. CVE summarizes:
Unspecified vulnerability in Oracle Sun Solaris 8 allows remote attackers to affect availability, related to TCP/IP.
The weakness was shared 07/17/2012 with Oracle as Patch Day July 2012 as confirmed advisory (Website). The advisory is available at oracle.com. This vulnerability is traded as CVE-2012-3120 since 06/06/2012. The exploitability is told to be easy. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. The technical details are unknown and an exploit is not available. This vulnerability is assigned to T1499 by the MITRE ATT&CK project.
The commercial vulnerability scanner Qualys is able to test this issue with plugin 120347 (Solaris TCP/IP Multiple Denial of Service Vulnerabilities).
Applying a patch is able to eliminate this problem. A possible mitigation has been published immediately after the disclosure of the vulnerability.
The vulnerability is also documented in the vulnerability database at X-Force (77041). The entries 5783, 5697, 5766 and 5728 are related to this item.
Product
Type
Vendor
Name
Version
License
CPE 2.3
CPE 2.2
CVSSv4
VulDB CVSS-B Score: 🔍VulDB CVSS-BT Score: 🔍
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv3
VulDB Meta Base Score: 7.5VulDB Meta Temp Score: 6.5
VulDB Base Score: 7.5
VulDB Temp Score: 6.5
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv2
AV | AC | Au | C | I | A |
---|---|---|---|---|---|
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
---|---|---|---|---|---|
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
NVD Base Score: 🔍
Exploiting
Class: Denial of serviceCWE: CWE-404
ATT&CK: T1499
Local: No
Remote: Yes
Availability: 🔍
Status: Unproven
EPSS Score: 🔍
EPSS Percentile: 🔍
Price Prediction: 🔍
Current Price Estimation: 🔍
0-Day | unlock | unlock | unlock | unlock |
---|---|---|---|---|
Today | unlock | unlock | unlock | unlock |
Qualys ID: 🔍
Qualys Name: 🔍
Threat Intelligence
Interest: 🔍Active Actors: 🔍
Active APT Groups: 🔍
Countermeasures
Recommended: PatchStatus: 🔍
Reaction Time: 🔍
Exposure Time: 🔍
Timeline
06/06/2012 🔍07/17/2012 🔍
07/17/2012 🔍
07/17/2012 🔍
07/17/2012 🔍
07/17/2012 🔍
07/18/2012 🔍
07/18/2012 🔍
07/30/2012 🔍
04/19/2017 🔍
Sources
Vendor: oracle.comAdvisory: Patch Day July 2012
Organization: Oracle
Status: Confirmed
Confirmation: 🔍
CVE: CVE-2012-3120 (🔍)
X-Force: 77041 - Oracle Solaris TCP/IP denial of service, High Risk
SecurityTracker: 1027274 - Solaris Multiple Bugs Let Remote Users Access and Modify Data and Deny Service and Local Users Gain Elevated Privileges
Vulnerability Center: 35567 - [cpujul2012-392727] Oracle Solaris 8 Remote Unspecified Vulnerability Affects Availability via Vectors Related to TCP/IP, High
SecurityFocus: 54493 - Oracle Sun Products Suite CVE-2012-3120 Remote Solaris Vulnerability
OSVDB: 83927
See also: 🔍
Entry
Created: 07/30/2012 16:00Updated: 04/19/2017 10:29
Changes: 07/30/2012 16:00 (72), 04/19/2017 10:29 (7)
Complete: 🔍
No comments yet. Languages: en.
Please log in to comment.