CVE-2018-3270 in Solaris

Resumen (Inglés)

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 11.3. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Solaris. CVSS 3.0 Base Score 1.8 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:L).

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservar

2017-12-15

Divulgación

2018-10-16

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
125645	Oracle Solaris Kernel escalada de privilegios	284	No está definido	Arreglo oficial	CVE-2018-3270

Fuentes

• MITRE
• NVD
• CVE Details