First published: Thu Apr 19 2018(Updated: )
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: NTPD). The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Solaris accessible data. CVSS 3.0 Base Score 3.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).
Credit: secalert_us@oracle.com
Affected Software | Affected Version | How to fix |
---|---|---|
Oracle Solaris SPARC | =11.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2018-2763 is considered a high severity vulnerability due to its potential for exploitation by low privileged attackers.
To mitigate CVE-2018-2763, update to the latest version of Oracle Solaris 11.3 or apply the recommended patches provided by Oracle.
Exploitation of CVE-2018-2763 could allow attackers to compromise the Solaris system, potentially leading to unauthorized access or data manipulation.
CVE-2018-2763 primarily affects users of Oracle Solaris version 11.3 running NTPD.
CVE-2018-2763 is not a remote vulnerability; it requires a low privileged attacker with logon access to the infrastructure where Solaris is executed.