CVE-2023-22129

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Solaris. Note: This vunlerability only affects SPARC Systems. CVSS 3.1 Base Score 5.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.oracle.com/security-alerts/cpuoct2023.html	Patch Vendor Advisory
https://www.oracle.com/security-alerts/cpuoct2023.html	Patch Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:o:oracle:solaris:11:*:*:*:*:*:sparc:*

History

21 Nov 2024, 07:44

Type	Values Removed	Values Added
References	~~() https://www.oracle.com/security-alerts/cpuoct2023.html - Patch, Vendor Advisory~~	() https://www.oracle.com/security-alerts/cpuoct2023.html - Patch, Vendor Advisory

23 Oct 2023, 18:55

Type	Values Removed	Values Added
References	~~(MISC) https://www.oracle.com/security-alerts/cpuoct2023.html -~~	(MISC) https://www.oracle.com/security-alerts/cpuoct2023.html - Patch, Vendor Advisory
CPE		cpe:2.3:o:oracle:solaris:11::::::sparc:
First Time		Oracle solaris Oracle
CWE		NVD-CWE-noinfo

17 Oct 2023, 22:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-10-17 22:15

Updated : 2024-11-21 07:44

NVD link : CVE-2023-22129

Mitre link : CVE-2023-22129

CVE.ORG link : CVE-2023-22129

JSON object : View

Products Affected

oracle

solaris

CWE

NVD-CWE-noinfo

{"id": "CVE-2023-22129", "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "secalert_us@oracle.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "published": "2023-10-17T22:15:16.900", "references": [{"url": "https://www.oracle.com/security-alerts/cpuoct2023.html", "tags": ["Patch", "Vendor Advisory"], "source": "secalert_us@oracle.com"}, {"url": "https://www.oracle.com/security-alerts/cpuoct2023.html", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Solaris. Note: This vunlerability only affects SPARC Systems. CVSS 3.1 Base Score 5.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."}, {"lang": "es", "value": "Vulnerabilidad en el producto Oracle Solaris de Oracle Systems (componente: Kernel). La versi\u00f3n compatible que se ve afectada es la 11. Una vulnerabilidad f\u00e1cilmente explotable permite a un atacante con pocos privilegios iniciar sesi\u00f3n en la infraestructura donde se ejecuta Oracle Solaris para comprometer Oracle Solaris. Los ataques exitosos de esta vulnerabilidad pueden tener como resultado una capacidad no autorizada para causar un bloqueo o una falla frecuentemente repetible (DOS completo) de Oracle Solaris. Nota: Esta vulnerabilidad solo afecta a los sistemas SPARC. CVSS 3.1 Puntuaci\u00f3n base 5.5 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."}], "lastModified": "2024-11-21T07:44:21.380", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:oracle:solaris:11:*:*:*:*:*:sparc:*", "vulnerable": true, "matchCriteriaId": "EB70B299-0A40-401F-ADDD-5D34F1E04052"}], "operator": "OR"}]}], "sourceIdentifier": "secalert_us@oracle.com"}