CVE-2022-21298: Low severity oracle solaris and zettabyte file system (zfs) vulnerability
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Install). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Solaris accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Solaris. CVSS 3.1 Base Score 3.9 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-21298?
CVE-2022-21298 is classified as an easily exploitable vulnerability that allows a low privileged attacker to compromise Oracle Solaris.
How do I fix CVE-2022-21298?
To fix CVE-2022-21298, users should apply the latest security patches provided by Oracle for Oracle Solaris 11.
Who is affected by CVE-2022-21298?
CVE-2022-21298 affects users with Oracle Solaris version 11 who have low privileged access to the infrastructure.
What are the potential impacts of CVE-2022-21298?
The potential impact of CVE-2022-21298 includes unauthorized access and execution of malicious actions on Oracle Solaris.
Is CVE-2022-21298 a local or remote vulnerability?
CVE-2022-21298 is a local vulnerability that requires an attacker to have logon access to the system where Oracle Solaris runs.