CVE-2018-2763: Low severity oracle solaris and zettabyte file system (zfs) vulnerability

Published Apr 19, 2018

Updated

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: NTPD). The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Solaris accessible data. CVSS 3.0 Base Score 3.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).

Affected Software

1 affected component

Oracle Solaris=11.3

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html

Event History

Apr 19, 2018

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-2763?

CVE-2018-2763 is considered a high severity vulnerability due to its potential for exploitation by low privileged attackers.

How do I fix CVE-2018-2763?

To mitigate CVE-2018-2763, update to the latest version of Oracle Solaris 11.3 or apply the recommended patches provided by Oracle.

What are the potential impacts of CVE-2018-2763?

Exploitation of CVE-2018-2763 could allow attackers to compromise the Solaris system, potentially leading to unauthorized access or data manipulation.

Who is affected by CVE-2018-2763?

CVE-2018-2763 primarily affects users of Oracle Solaris version 11.3 running NTPD.

Is CVE-2018-2763 a remote vulnerability?

CVE-2018-2763 is not a remote vulnerability; it requires a low privileged attacker with logon access to the infrastructure where Solaris is executed.