CVE-2017-3516: High severity Oracle Solaris vulnerability
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel Zones virtualized NIC driver). The supported version that is affected is 11.3. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise Solaris. While the vulnerability is in Solaris, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Solaris. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-3516?
CVE-2017-3516 is classified as an easily exploitable vulnerability that allows low privileged attackers with network access to compromise affected systems.
How do I fix CVE-2017-3516?
To address CVE-2017-3516, ensure that you apply the latest security patch released by Oracle for Solaris 11.3.
Which versions of Solaris are affected by CVE-2017-3516?
The affected version of Solaris for CVE-2017-3516 is 11.3.
What components are affected by CVE-2017-3516?
CVE-2017-3516 affects the Kernel Zones virtualized NIC driver in the Solaris component of Oracle Sun Systems Products Suite.
Can I exploit CVE-2017-3516 without high privileges?
Yes, CVE-2017-3516 can be exploited by low privileged attackers who have network access.