CVE-2020-2605: High severity Oracle Solaris vulnerability
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Solaris accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Solaris. CVSS 3.0 Base Score 7.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-2605?
CVE-2020-2605 is classified as an easily exploitable vulnerability that allows a low privileged attacker to compromise Oracle Solaris.
How do I fix CVE-2020-2605?
To mitigate CVE-2020-2605, it is recommended to apply the latest security patches provided by Oracle for Solaris 11.
What product is affected by CVE-2020-2605?
CVE-2020-2605 affects the Oracle Solaris product, specifically version 11.
Who can exploit CVE-2020-2605?
A low privileged attacker with logon access to the infrastructure where Oracle Solaris runs can exploit CVE-2020-2605.
What component is vulnerable in CVE-2020-2605?
The vulnerability in CVE-2020-2605 is found in the Filesystem component of Oracle Solaris.