Lucene search

OracleCVE-2022-21375

HistoryJan 19, 2022 - 12:15 p.m.

CVE-2022-21375

2022-01-1912:15:16

oracle

web.nvd.nist.gov

114

cve-2022-21375

oracle solaris

oracle systems

vulnerability

dos

security

cve

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.2

Confidence

High

EPSS

Percentile

15.6%

JSON

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Solaris. CVSS 3.1 Base Score 5.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Affected configurations

Nvd

Node

oraclehttp_serverMatch12.2.1.3.0

oraclehttp_serverMatch12.2.1.4.0

oraclezfs_storage_appliance_kitMatch8.8

oraclesolarisMatch11

VendorProductVersionCPE
oraclehttp_server12.2.1.3.0cpe:2.3:a:oracle:http_server:12.2.1.3.0:*:*:*:*:*:*:*
oraclehttp_server12.2.1.4.0cpe:2.3:a:oracle:http_server:12.2.1.4.0:*:*:*:*:*:*:*
oraclezfs_storage_appliance_kit8.8cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*
oraclesolaris11cpe:2.3:o:oracle:solaris:11:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	http_server	12.2.1.3.0	cpe:2.3:a:oracle:http_server:12.2.1.3.0:::::::*
oracle	http_server	12.2.1.4.0	cpe:2.3:a:oracle:http_server:12.2.1.4.0:::::::*
oracle	zfs_storage_appliance_kit	8.8	cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:::::::*
oracle	solaris	11	cpe:2.3:o:oracle:solaris:11:::::::*

CNA Affected

[
  {
    "product": "Solaris Operating System",
    "vendor": "Oracle Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "11"
      }
    ]
  }
]

References

www.oracle.com/security-alerts/cpuapr2022.html

www.oracle.com/security-alerts/cpujan2022.html

Social References

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.2

Confidence

High

EPSS

Percentile

15.6%

JSON

Related for CVE-2022-21375