CVE-2017-10275: Medium severity oracle solaris vulnerability

Published Oct 19, 2017

Updated

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: Filesystem). The supported version that is affected is AK 2013. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Sun ZFS Storage Appliance Kit (AK) executes to compromise Sun ZFS Storage Appliance Kit (AK). Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Sun ZFS Storage Appliance Kit (AK). CVSS 3.0 Base Score 5.0 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H).

Affected Software

1 affected component

ORACLE Solaris Ak=2013

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html

Event History

Oct 19, 2017

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-10275?

CVE-2017-10275 is classified as an easily exploitable vulnerability that could be used by low privileged attackers.

How do I fix CVE-2017-10275?

To resolve CVE-2017-10275, it is recommended to apply the latest patches provided by Oracle for the affected version of Sun ZFS Storage Appliance Kit.

What versions are affected by CVE-2017-10275?

CVE-2017-10275 affects Oracle Solaris AK version 2013.

Can CVE-2017-10275 lead to unauthorized access?

Yes, CVE-2017-10275 allows low privileged attackers to exploit the vulnerability and potentially gain unauthorized access.

Is there a workaround for CVE-2017-10275?

There are currently no known workarounds for CVE-2017-10275 other than applying the latest patches.