CVE-2017-3629: Buffer Overflow

Published Jun 22, 2017

Updated

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks of this vulnerability can result in takeover of Solaris. CVSS 3.0 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Affected Software

2 affected components

Oracle Solaris=10

Oracle Solaris=11

Event History

Jun 22, 2017

CVE Published

via MITRE·01:00 PM

Data Sourced

via MITRE·01:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-3629?

CVE-2017-3629 is considered to be an easily exploitable vulnerability with a significant impact on the affected Solaris systems.

How do I fix CVE-2017-3629?

To address CVE-2017-3629, apply the latest security patches provided by Oracle for Solaris versions 10 and 11.

Who is affected by CVE-2017-3629?

CVE-2017-3629 affects users of Oracle Solaris SPARC versions 10 and 11.

What type of vulnerability is CVE-2017-3629?

CVE-2017-3629 is a kernel vulnerability that can be exploited by low privileged attackers with logon access.

Can CVE-2017-3629 be exploited remotely?

No, CVE-2017-3629 requires local access to the Solaris system for exploitation.