This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064301Z. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the DTrace DOF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated object. An attacker can leverage this vulnerability to execute code under the context of the host OS. Was ZDI-CAN-5106.

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11.3. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks of this vulnerability can result in takeover of Solaris.

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Solaris accessible data.

This Solaris system is missing necessary patches to address critical security updates :

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Kernel). Supported     versions that are affected are 10 and 11.3. Difficult to     exploit vulnerability allows low privileged attacker     with logon to the infrastructure where Solaris executes     to compromise Solaris. Successful attacks of this     vulnerability can result in takeover of Solaris.
    (CVE-2018-1171)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: NVIDIA-GFX Kernel     driver). The supported version that is affected is 11.3.
    Easily exploitable vulnerability allows low privileged     attacker with network access via ISCSI to compromise     Solaris. Successful attacks of this vulnerability can     result in unauthorized ability to cause a hang or     frequently repeatable crash (complete DOS) of Solaris as     well as unauthorized update, insert or delete access to     some of Solaris accessible data and unauthorized read     access to a subset of Solaris accessible data.
    (CVE-2018-2926)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: RAD). The     supported version that is affected is 11.3. Easily     exploitable vulnerability allows unauthenticated     attacker with network access via multiple protocols to     compromise Solaris. Successful attacks require human     interaction from a person other than the attacker.
    Successful attacks of this vulnerability can result in     unauthorized creation, deletion or modification access     to critical data or all Solaris accessible data as well     as unauthorized access to critical data or complete     access to all Solaris accessible data. (CVE-2018-2928)

ID	Name	Product	Family	Severity
118063	Solaris 10 (x86) : 150401-63	Nessus	Solaris Local Security Checks	high
118060	Solaris 10 (sparc) : 150400-63	Nessus	Solaris Local Security Checks	high
111191	Oracle Solaris Critical Patch Update : jul2018_SRU11_3_34_4_0	Nessus	Solaris Local Security Checks	high
111127	Solaris 10 (x86) : 150401-62	Nessus	Solaris Local Security Checks	high
111117	Solaris 10 (sparc) : 150400-62	Nessus	Solaris Local Security Checks	high

Detections

Analytics

CVE-2018-1171

high

Tenable Plugins

high

high

high

high

high