CVE-2019-2961: Low severity oracle solaris and zettabyte file system (zfs) vulnerability

Published Oct 16, 2019

Updated

Vulnerability in the Oracle Solaris product of Oracle Systems (component: SMF services & legacy daemons). The supported version that is affected is 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Solaris accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Solaris. CVSS 3.0 Base Score 3.6 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L).

Affected Software

1 affected component

Oracle Solaris=11

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html

Event History

Oct 16, 2019

CVE Published

via MITRE·05:40 PM

Data Sourced

via MITRE·05:40 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2019-2961?

CVE-2019-2961 is classified as a low-severity vulnerability.

How do I fix CVE-2019-2961?

To fix CVE-2019-2961, apply the latest patches provided by Oracle for Solaris 11.

What component is affected by CVE-2019-2961?

CVE-2019-2961 affects the SMF services and legacy daemons in Oracle Solaris.

Who is affected by CVE-2019-2961?

CVE-2019-2961 affects users with low privileges who have logon access to Oracle Solaris infrastructure.

Can CVE-2019-2961 be exploited remotely?

CVE-2019-2961 is a difficult-to-exploit vulnerability that requires local access to the affected system.