First published: Wed Oct 16 2019(Updated: )
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Solaris accessible data as well as unauthorized read access to a subset of Oracle Solaris accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Solaris. CVSS 3.0 Base Score 5.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L).
Credit: secalert_us@oracle.com
Affected Software | Affected Version | How to fix |
---|---|---|
Oracle Solaris SPARC | =10 | |
Oracle Solaris SPARC | =11 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2019-2765 is categorized as a difficult to exploit vulnerability that affects Oracle Solaris products.
To mitigate CVE-2019-2765, update to the latest supported version of Oracle Solaris 10 or 11 as advised by Oracle.
CVE-2019-2765 affects low privileged attackers with logon access to infrastructure where Oracle Solaris 10 or 11 is executed.
CVE-2019-2765 impacts the Filesystem component of the Oracle Solaris product.
Oracle Solaris versions 10 and 11 are affected by CVE-2019-2765.