CVE-2024-20999: High severity oracle solaris and zettabyte file system (zfs) vulnerability
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Zones). The supported version that is affected is 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-20999?
CVE-2024-20999 is classified as an easily exploitable vulnerability allowing high privileged access.
How do I fix CVE-2024-20999?
To fix CVE-2024-20999, apply the latest security patches provided by Oracle for Solaris 11.
Who is affected by CVE-2024-20999?
CVE-2024-20999 affects users running Oracle Solaris 11, specifically in environments where Zones are utilized.
What are the potential impacts of CVE-2024-20999?
Exploitation of CVE-2024-20999 could allow an attacker with logon access to compromise the integrity of the Oracle Solaris system.
Is CVE-2024-20999 exploitable remotely?
CVE-2024-20999 is not remotely exploitable; it requires high privilege access to the infrastructure hosting Oracle Solaris.