CVE-2022-39401: Medium severity oracle solaris and zettabyte file system (zfs) vulnerability

Published Oct 18, 2022

Updated

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Solaris. CVSS 3.1 Base Score 5.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Affected Software

1 affected component

Oracle Solaris=11

Remediation

Patch Available

https://www.oracle.com/security-alerts/cpuoct2022.html

Event History

Oct 18, 2022

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID of this Oracle Solaris Kernel vulnerability?

The vulnerability ID of this Oracle Solaris Kernel vulnerability is CVE-2022-39401.

What is the affected software?

The affected software is Oracle Solaris version 11.

How severe is this vulnerability?

This vulnerability is rated as medium severity with a CVSS score of 5.5.

How can this vulnerability be exploited?

This vulnerability can be exploited by a low privileged attacker with logon access to compromise Oracle Solaris.

Where can I find more information about this vulnerability?

You can find more information about this vulnerability at the following link: [Oracle Security Alerts - October 2022](https://www.oracle.com/security-alerts/cpuoct2022.html)