First published: Wed Oct 16 2019(Updated: )
Vulnerability in the Oracle Solaris product of Oracle Systems (component: LDAP Library). The supported version that is affected is 11. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Solaris. CVSS 3.0 Base Score 1.8 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:L).
Credit: secalert_us@oracle.com
Affected Software | Affected Version | How to fix |
---|---|---|
Oracle Solaris and Zettabyte File System (ZFS) | =11 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2019-3008 is rated as a high severity vulnerability.
To fix CVE-2019-3008, apply the latest security patches provided by Oracle for Oracle Solaris 11.
CVE-2019-3008 affects users of Oracle Solaris 11 with a high privileged attacker access.
CVE-2019-3008 specifically impacts the LDAP Library component of Oracle Solaris.
CVE-2019-3008 requires physical logon access to exploit, making remote exploitation difficult.