CVE-2019-2543: Medium severity oracle solaris and zettabyte file system (zfs) vulnerability

Published Jan 16, 2019

Updated

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via KSSL to compromise Oracle Solaris. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Solaris accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

Affected Software

2 affected components

Oracle Solaris=10

Oracle Solaris=11

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html

Event History

Jan 16, 2019

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

DescriptionWeakness

Data Sourced

via NVD·07:30 PM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2019-2543?

CVE-2019-2543 is considered to be a high severity vulnerability due to its ability to allow unauthenticated network access and compromise Oracle Solaris.

How do I fix CVE-2019-2543?

To mitigate CVE-2019-2543, users should apply the latest patches provided by Oracle for affected versions of Solaris 10 and 11.

What systems are affected by CVE-2019-2543?

CVE-2019-2543 affects Oracle Solaris 10 and 11, specifically the kernel component.

What type of vulnerability is CVE-2019-2543?

CVE-2019-2543 is an easily exploitable vulnerability that allows for remote code execution via KSSL.

Can CVE-2019-2543 be exploited remotely?

Yes, CVE-2019-2543 can be exploited remotely by an unauthenticated attacker with network access.