CVE-2017-10099: Medium severity oracle sparc/sun system firmware vulnerability
Vulnerability in the SPARC M7, T7, S7 based Servers component of Oracle Sun Systems Products Suite (subcomponent: Firmware). The supported version that is affected is Prior to 9.7.6.b. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where SPARC M7, T7, S7 based Servers executes to compromise SPARC M7, T7, S7 based Servers. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of SPARC M7, T7, S7 based Servers. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-10099?
CVE-2017-10099 has been rated as a high severity vulnerability, allowing high privileged attackers with logon access to exploit the system.
How do I fix CVE-2017-10099?
To fix CVE-2017-10099, upgrade your Oracle SPARC/SUN System Firmware to version 9.7.6.b or later.
What systems are affected by CVE-2017-10099?
CVE-2017-10099 affects SPARC M7, T7, and S7 based servers running Oracle SPARC/SUN System Firmware versions prior to 9.7.6.b.
What types of attacks can CVE-2017-10099 facilitate?
CVE-2017-10099 can facilitate unauthorized access and control over the affected Oracle systems for attackers with sufficient privileges.
Is there a patch available for CVE-2017-10099?
Yes, a patch addressing CVE-2017-10099 is available in the form of a firmware update to version 9.7.6.b or later.