CVE-2019-2544: Medium severity oracle solaris and zettabyte file system (zfs) vulnerability

Published Jan 16, 2019

Updated

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Solaris accessible data. CVSS 3.0 Base Score 4.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

Affected Software

2 affected components

Oracle Solaris=10

Oracle Solaris=11

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html

Event History

Jan 16, 2019

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

DescriptionWeakness

Data Sourced

via NVD·07:30 PM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2019-2544?

CVE-2019-2544 is classified as an easily exploitable vulnerability that can significantly compromise systems.

How do I fix CVE-2019-2544?

To fix CVE-2019-2544, you should apply the latest security patch provided by Oracle for affected versions of Oracle Solaris.

Which versions of Oracle Solaris are affected by CVE-2019-2544?

CVE-2019-2544 affects Oracle Solaris versions 10 and 11.

Can CVE-2019-2544 be exploited remotely?

CVE-2019-2544 can be exploited by an unauthenticated attacker with logon access to the infrastructure.

What component is affected by CVE-2019-2544?

CVE-2019-2544 affects the Kernel component of the Oracle Solaris operating system.