CVE-2019-2541: High severity oracle solaris and zettabyte file system (zfs) vulnerability

Published Jan 16, 2019

Updated

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: DHCP Client). The supported version that is affected is 10. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Solaris executes to compromise Oracle Solaris. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).

Affected Software

1 affected component

Oracle Solaris=10

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html

Event History

Jan 16, 2019

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

DescriptionWeakness

Data Sourced

via NVD·07:30 PM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2019-2541?

CVE-2019-2541 has been classified as a moderate severity vulnerability.

How do I fix CVE-2019-2541?

To mitigate CVE-2019-2541, apply the latest security patches provided by Oracle for Solaris 10.

Who is affected by CVE-2019-2541?

CVE-2019-2541 affects Oracle Solaris 10 systems that use the DHCP Client.

Can CVE-2019-2541 be exploited remotely?

CVE-2019-2541 requires physical access to the hardware communication segment to be exploited.

What component is involved in CVE-2019-2541?

CVE-2019-2541 involves a vulnerability in the DHCP Client component of Oracle Solaris.