CVE-2019-2704: Medium severity oracle solaris and zettabyte file system (zfs) vulnerability

Published Apr 23, 2019

Updated

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: IPS Package Manager). The supported version that is affected is 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Solaris. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Solaris accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

Affected Software

1 affected component

Oracle Solaris=11

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html

Event History

Apr 23, 2019

CVE Published

via MITRE·06:16 PM

Data Sourced

via MITRE·06:16 PM

DescriptionWeakness

Data Sourced

via NVD·07:32 PM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2019-2704?

CVE-2019-2704 is considered easily exploitable and poses a serious risk to Oracle Solaris 11.

How do I fix CVE-2019-2704?

To address CVE-2019-2704, apply the latest patches provided by Oracle for Solaris 11.

Who is affected by CVE-2019-2704?

CVE-2019-2704 affects users of Oracle Solaris 11, particularly those using the IPS Package Manager.

Can CVE-2019-2704 be exploited remotely?

Yes, CVE-2019-2704 allows unauthenticated attackers to exploit the vulnerability remotely over HTTP.

What components are involved in CVE-2019-2704?

CVE-2019-2704 involves the Oracle Solaris component of the Oracle Sun Systems Products Suite.