CVE-2023-21928: Low severity oracle solaris and zettabyte file system (zfs) vulnerability

Published Apr 18, 2023

Updated

Vulnerability in the Oracle Solaris product of Oracle Systems (component: IPS repository daemon). The supported version that is affected is 11. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Solaris accessible data. CVSS 3.1 Base Score 1.8 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N).

Affected Software

1 affected component

Oracle Solaris=11

Remediation

Patch Available

https://www.oracle.com/security-alerts/cpuapr2023.html

Event History

Apr 18, 2023

CVE Published

via MITRE·07:54 PM

Data Sourced

via MITRE·07:54 PM

DescriptionSeverity

Frequently Asked Questions

What is the vulnerability ID?

The vulnerability ID is CVE-2023-21928.

What is the affected software?

The affected software is Oracle Solaris version 11.

What is the severity of CVE-2023-21928?

The severity of CVE-2023-21928 is low with a CVSS score of 1.8.

How can the vulnerability be exploited?

The vulnerability allows a high privileged attacker with logon access to the Oracle Solaris infrastructure to compromise the system.

Where can I find more information?

You can find more information about CVE-2023-21928 in the Oracle Security Alerts page: https://www.oracle.com/security-alerts/cpuapr2023.html