Researchers disclose critical zero-day vulnerability in Oracle Solaris that was exploited in the wild by an uncategorized threat actor.

CVE-2020-14871: Critical Buffer Overflow in Oracle Solaris Exploited in the Wild as Zero-Day

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Pluggable authentication module). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. Note: This CVE is not exploitable for Solaris 11.1 and later releases, and ZFSSA 8.7 and later releases, thus the CVSS Base Score is 0.0. CVSS 3.1 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).

The remote SSH server is affected by a security bypass vulnerability due to a flaw in the parse_user_name() function in the Pluggable Authentication Module (PAM). A remote attacker can exploit this, via a crafted keyboard-interactive username string, to execute arbitrary code on the target system.

This Solaris system is missing necessary patches to address critical security updates :

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: Filesystem). The supported version     that is affected is 11. Easily exploitable vulnerability     allows low privileged attacker with logon to the     infrastructure where Oracle Solaris executes to     compromise Oracle Solaris. Successful attacks of this     vulnerability can result in unauthorized ability to     cause a hang or frequently repeatable crash (complete     DOS) of Oracle Solaris. CVSS 3.1 Base Score 5.5     (Availability impacts). CVSS Vector:
    (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
    (CVE-2020-14754)

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: Utility). The supported version that     is affected is 11. Difficult to exploit vulnerability     allows low privileged attacker with network access via     SSH to compromise Oracle Solaris. Successful attacks     require human interaction from a person other than the     attacker and while the vulnerability is in Oracle     Solaris, attacks may significantly impact additional     products. Successful attacks of this vulnerability can     result in unauthorized update, insert or delete access     to some of Oracle Solaris accessible data. CVSS 3.1 Base     Score 3.0 (Integrity impacts). CVSS Vector:
    (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N).
    (CVE-2020-14818)

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: Pluggable authentication module).
    Supported versions that are affected are 10 and 11.
    Easily exploitable vulnerability allows unauthenticated     attacker with network access via multiple protocols to     compromise Oracle Solaris. While the vulnerability is in     Oracle Solaris, attacks may significantly impact     additional products. Successful attacks of this     vulnerability can result in takeover of Oracle Solaris.
    CVSS 3.1 Base Score 10.0 (Confidentiality, Integrity and     Availability impacts). CVSS Vector:
    (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).
    (CVE-2020-14871)

This Solaris system is missing necessary patches to address a critical security update :

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: Pluggable authentication module).
    Supported versions that are affected are 10 and 11.
    Easily exploitable vulnerability allows unauthenticated     attacker with network access via multiple protocols to     compromise Oracle Solaris. While the vulnerability is in     Oracle Solaris, attacks may significantly impact     additional products. Successful attacks of this     vulnerability can result in takeover of Oracle Solaris.
    CVSS 3.1 Base Score 10.0 (Confidentiality, Integrity and     Availability impacts). CVSS Vector:
    (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).
    (CVE-2020-14871)

SunOS 5.10: libpam.so patch.
Date this patch was last updated by Sun : Oct/19/20

SunOS 5.10_x86: libpam.so patch.
Date this patch was last updated by Sun : Oct/19/20

ID	Name	Product	Family	Severity
142712	Oracle Solaris PAM parse_user_name() buffer overflow (CVE-2020-14871)	Nessus	Misc.	critical
141773	Oracle Solaris Critical Patch Update : oct2020_SRU11_4_24_75_2	Nessus	Solaris Local Security Checks	critical
141772	Oracle Solaris Critical Patch Update : oct2020_SRU11_3_36_23_0	Nessus	Solaris Local Security Checks	critical
141557	Solaris 10 (sparc) : 153074-01	Nessus	Solaris Local Security Checks	critical
141553	Solaris 10 (x86) : 153075-01	Nessus	Solaris Local Security Checks	critical

Detections

Analytics

CVE-2020-14871

critical

Tenable Plugins

critical

critical

critical

critical

critical