CVE-2023-22023: High severity oracle solaris and zettabyte file system (zfs) vulnerability

Published Jul 18, 2023

Updated

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Device Driver Interface). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. Note: CVE-2023-22023 is equivalent to CVE-2023-31284. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Affected Software

1 affected component

Oracle Solaris=11

Remediation

Patch Available

https://www.oracle.com/security-alerts/cpujul2023.html

Event History

Jul 18, 2023

CVE Published

via MITRE·08:18 PM

Data Sourced

via MITRE·08:18 PM

DescriptionSeverity

Data Sourced

09:15 PM

DescriptionSeverity

Frequently Asked Questions

What is the vulnerability ID for this Oracle Solaris vulnerability?

The vulnerability ID for this Oracle Solaris vulnerability is CVE-2023-22023.

What is the affected software for this vulnerability?

The affected software for this vulnerability is Oracle Solaris version 11.

How severe is this Oracle Solaris vulnerability?

This Oracle Solaris vulnerability has a severity level of high (7).

How can this Oracle Solaris vulnerability be exploited?

This Oracle Solaris vulnerability can be exploited by a low privileged attacker with logon access to the infrastructure where Oracle Solaris executes.

Where can I find more information about this Oracle Solaris vulnerability?

You can find more information about this Oracle Solaris vulnerability at the following reference link: https://www.oracle.com/security-alerts/cpujul2023.html