CVE-2017-10122: Low severity oracle solaris and zettabyte file system (zfs) vulnerability
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Solaris accessible data. CVSS 3.0 Base Score 1.8 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-10122?
CVE-2017-10122 is classified as a difficult to exploit vulnerability with high impact potential on affected Solaris systems.
How do I fix CVE-2017-10122?
To mitigate CVE-2017-10122, apply the latest security patches provided by Oracle for Solaris versions 10 and 11.
Who is affected by CVE-2017-10122?
CVE-2017-10122 affects users of Oracle Solaris versions 10 and 11 who have high privileged access.
What types of attacks can exploit CVE-2017-10122?
CVE-2017-10122 can be exploited by high privileged attackers who have logon access to the infrastructure where Solaris executes.
What components are involved in CVE-2017-10122?
CVE-2017-10122 involves a vulnerability in the Solaris component of the Oracle Sun Systems Products Suite specifically within the Kernel.