CVE-2018-3172 PUBLISHED CVSS 5 MEDIUM

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: RPC). Supported versions that are affected are 10 and 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via Portmap v3 to compromise Solaris. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Solaris. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

EPSS 2.51% · 85.2th percentile

Risk Scores

CVSS v2.0
5
EPSS Score
2.51%
85.2th percentile

Affected Products

VendorProductVersions
Oracle CorporationSolaris Operating System10, 11.4
oraclesolaris11.3

Timeline

References

Open in Interactive Console →