CVE-2018-3271
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel Zones). The supported version that is affected is 11.3. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. While the vulnerability is in Solaris, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Solaris. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H).
EPSS 0.10% · 27.8th percentile
Risk Scores
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle Corporation | Solaris Operating System | 11.3 |
| oracle | solaris | 11.3 |
Exploit Intelligence
- 1041895 (circl)
- 105605 (circl)
- http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html (circl)
Timeline
- Oct 17, 2018 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 24, 2021 EPSS Score
- Oct 26, 2021 EPSS Score
- Dec 27, 2021 EPSS Score
- Feb 28, 2022 EPSS Score
- May 2, 2022 EPSS Score
- Jul 3, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Nov 6, 2022 EPSS Score
- Jan 8, 2023 EPSS Score
References
- http://www.securitytracker.com/id/1041895 advisory
- https://www.oracle.com/technetwork/security-advisory/cpuoct2018verbose-5170927.html#SUNS advisory
- https://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html advisory
- 105605 vdb
- http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html url
- https://nvd.nist.gov/vuln/detail/CVE-2018-3271 advisory