CVE-2019-2545: Medium severity oracle solaris and zettabyte file system (zfs) vulnerability

Published Jan 16, 2019

Updated

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: LDoms IO). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Solaris. CVSS 3.0 Base Score 4.0 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

Affected Software

2 affected components

Oracle Solaris=10

Oracle Solaris=11

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html

Event History

Jan 16, 2019

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

DescriptionWeakness

Data Sourced

via NVD·07:30 PM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2019-2545?

CVE-2019-2545 is considered an easily exploitable vulnerability that allows unauthorized access and compromise.

How do I fix CVE-2019-2545?

To mitigate CVE-2019-2545, users should apply the latest security patches provided by Oracle for Solaris versions 10 and 11.

Who is affected by CVE-2019-2545?

CVE-2019-2545 affects users running Oracle Solaris 10 and 11 on supported platforms.

Can CVE-2019-2545 be exploited remotely?

Yes, CVE-2019-2545 can be exploited by an unauthenticated attacker with access to the local infrastructure.

What components are involved in CVE-2019-2545?

CVE-2019-2545 involves a vulnerability in the LDoms IO component of the Oracle Solaris system.