CVE-2022-39417: Medium severity oracle solaris and zettabyte file system (zfs) vulnerability

Published Oct 18, 2022

Updated

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Solaris. CVSS 3.1 Base Score 5.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Affected Software

1 affected component

Oracle Solaris=11

Event History

Oct 18, 2022

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2022-39417?

The severity of CVE-2022-39417 is medium.

What is the affected software for CVE-2022-39417?

The affected software for CVE-2022-39417 is Oracle Solaris 11.

How can an attacker exploit CVE-2022-39417?

An attacker with low privileges who has access to the Oracle Solaris infrastructure can easily exploit CVE-2022-39417.

How can CVE-2022-39417 be fixed?

To fix CVE-2022-39417, it is recommended to apply the necessary security updates from Oracle Systems.

Where can I find more information about CVE-2022-39417?

More information about CVE-2022-39417 can be found at the following link: [https://www.oracle.com/security-alerts/cpuoct2022.html](https://www.oracle.com/security-alerts/cpuoct2022.html)