This Solaris system is missing necessary patches to address critical security updates :

  - Vulnerability in the Oracle Solaris component of Oracle     Sun Systems Products Suite (subcomponent: Kernel).
    Supported versions that are affected are 10 and 11.
    Easily exploitable vulnerability allows unauthenticated     attacker with network access via KSSL to compromise     Oracle Solaris. Successful attacks of this vulnerability     can result in unauthorized read access to a subset of     Oracle Solaris accessible data. (CVE-2019-2543)

  - Vulnerability in the Oracle Solaris component of Oracle     Sun Systems Products Suite (subcomponent: Kernel).
    Supported versions that are affected are 10 and 11.
    Easily exploitable vulnerability allows unauthenticated     attacker with logon to the infrastructure where Oracle     Solaris executes to compromise Oracle Solaris.
    Successful attacks of this vulnerability can result in     unauthorized read access to a subset of Oracle Solaris     accessible data. (CVE-2019-2544)

JavaSE 8_x86: update 202 patch (equivalent to JDK 8u202), 64bit.
Date this patch was last updated by Sun : Jan/14/19

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Solaris accessible data.

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via KSSL to compromise Oracle Solaris. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Solaris accessible data.

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: DHCP Client). The supported version that is affected is 10. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Solaris executes to compromise Oracle Solaris. Successful attacks of this vulnerability can result in takeover of Oracle Solaris.

SunOS 5.10_x86: ImageMagick patch.
Date this patch was last updated by Sun : Jan/14/19

Vulnerability in the Solaris component of Oracle Sun Products Suite (subcomponent: Bind/Postinstall script for Bind package). The supported version that is affected is 10. Very difficult to exploit vulnerability requiring logon to Operating System plus additional login/authentication to component or subcomponent. Successful attack of this vulnerability can escalate attacker privileges resulting in unauthorized Operating System takeover including arbitrary code execution.

JavaSE 8: update 202 patch (equivalent to JDK 8u202), 64bit.
Date this patch was last updated by Sun : Jan/14/19

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Solaris accessible data.

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: LDoms IO). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Solaris.

SunOS 5.10: ImageMagick patch.
Date this patch was last updated by Sun : Jan/14/19

This Solaris system is missing necessary patches to address critical security updates :

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Kernel). The     supported version that is affected is 11.4. Easily     exploitable vulnerability allows unauthenticated     attacker with network access via multiple protocols to     compromise Solaris. Successful attacks of this     vulnerability can result in unauthorized access to     critical data or complete access to all Solaris     accessible data. (CVE-2016-5244)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Kernel). The     supported version that is affected is 11.4. Easily     exploitable vulnerability allows low privileged attacker     with logon to the infrastructure where Solaris executes     to compromise Solaris. Successful attacks of this     vulnerability can result in unauthorized ability to     cause a hang or frequently repeatable crash (complete     DOS) of Solaris. (CVE-2015-6937)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: RPC). Supported     versions that are affected are 10 and 11.4. Easily     exploitable vulnerability allows unauthenticated     attacker with network access via Portmap v3 to     compromise Solaris. Successful attacks of this     vulnerability can result in unauthorized ability to     cause a partial denial of service (partial DOS) of     Solaris. (CVE-2018-3172)

This Solaris system is missing necessary patches to address critical security updates :

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Remote     Administration Daemon (RAD)). The supported version that     is affected is 11.3. Easily exploitable vulnerability     allows unauthenticated attacker with network access via     multiple protocols to compromise Solaris. Successful     attacks require human interaction from a person other     than the attacker. Successful attacks of this     vulnerability can result in unauthorized creation,     deletion or modification access to critical data or all     Solaris accessible data as well as unauthorized access     to critical data or complete access to all Solaris     accessible data. (CVE-2018-3273)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: LibKMIP). The     supported version that is affected is 11.3. Difficult to     exploit vulnerability allows unauthenticated attacker     with network access via multiple protocols to compromise     Solaris. Successful attacks of this vulnerability can     result in unauthorized creation, deletion or     modification access to critical data or all Solaris     accessible data as well as unauthorized access to     critical data or complete access to all Solaris     accessible data. (CVE-2018-3275)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Kernel Zones     Virtualized NIC Driver). The supported version that is     affected is 11.3. Easily exploitable vulnerability     allows unauthenticated attacker with logon to the     infrastructure where Solaris executes to compromise     Solaris. Successful attacks of this vulnerability can     result in unauthorized ability to cause a hang or     frequently repeatable crash (complete DOS) of Solaris.
    (CVE-2018-3272)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Kernel). The     supported version that is affected is 11.3. Easily     exploitable vulnerability allows low privileged attacker     with network access via SMB to compromise Solaris.
    Successful attacks require human interaction from a     person other than the attacker. Successful attacks of     this vulnerability can result in unauthorized ability to     cause a hang or frequently repeatable crash (complete     DOS) of Solaris. (CVE-2018-3274)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Sudo). The     supported version that is affected is 11.3. Difficult to     exploit vulnerability allows unauthenticated attacker     with network access via multiple protocols to compromise     Solaris. Successful attacks of this vulnerability can     result in unauthorized update, insert or delete access     to some of Solaris accessible data as well as     unauthorized read access to a subset of Solaris     accessible data and unauthorized ability to cause a     partial denial of service (partial DOS) of Solaris.
    (CVE-2018-3263)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: LFTP). The     supported version that is affected is 11.3. Easily     exploitable vulnerability allows unauthenticated     attacker with network access via FTP to compromise     Solaris. Successful attacks of this vulnerability can     result in unauthorized read access to a subset of     Solaris accessible data. (CVE-2018-3267)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Kernel Zones). The     supported version that is affected is 11.3. Difficult to     exploit vulnerability allows high privileged attacker     with logon to the infrastructure where Solaris executes     to compromise Solaris. While the vulnerability is in     Solaris, attacks may significantly impact additional     products. Successful attacks of this vulnerability can     result in unauthorized ability to cause a hang or     frequently repeatable crash (complete DOS) of Solaris.
    (CVE-2018-3271)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: SMB Server). The     supported version that is affected is 11.3. Easily     exploitable vulnerability allows unauthenticated     attacker with network access via SMB to compromise     Solaris. Successful attacks of this vulnerability can     result in unauthorized ability to cause a partial denial     of service (partial DOS) of Solaris. (CVE-2018-3268)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Zones). The     supported version that is affected is 11.3. Difficult to     exploit vulnerability allows unauthenticated attacker     with logon to the infrastructure where Solaris executes     to compromise Solaris. Successful attacks of this     vulnerability can result in unauthorized update, insert     or delete access to some of Solaris accessible data as     well as unauthorized read access to a subset of Solaris     accessible data and unauthorized ability to cause a     partial denial of service (partial DOS) of Solaris.
    (CVE-2018-3265)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Kernel). The     supported version that is affected is 11.3. Easily     exploitable vulnerability allows low privileged attacker     with logon to the infrastructure where Solaris executes     to compromise Solaris. Successful attacks of this     vulnerability can result in unauthorized update, insert     or delete access to some of Solaris accessible data and     unauthorized ability to cause a partial denial of     service (partial DOS) of Solaris. (CVE-2018-3264)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: SMB Server). The     supported version that is affected is 11.3. Easily     exploitable vulnerability allows low privileged attacker     with network access via SMB to compromise Solaris.
    Successful attacks of this vulnerability can result in     unauthorized ability to cause a partial denial of     service (partial DOS) of Solaris. (CVE-2018-3269)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Verified Boot).
    The supported version that is affected is 11.3.
    Difficult to exploit vulnerability allows high     privileged attacker with logon to the infrastructure     where Solaris executes to compromise Solaris. Successful     attacks of this vulnerability can result in unauthorized     update, insert or delete access to some of Solaris     accessible data as well as unauthorized read access to a     subset of Solaris accessible data and unauthorized     ability to cause a partial denial of service (partial     DOS) of Solaris. (CVE-2018-3266)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Kernel). The     supported version that is affected is 11.3. Difficult to     exploit vulnerability allows high privileged attacker     with logon to the infrastructure where Solaris executes     to compromise Solaris. Successful attacks require human     interaction from a person other than the attacker.
    Successful attacks of this vulnerability can result in     unauthorized ability to cause a partial denial of     service (partial DOS) of Solaris. (CVE-2018-3270)

This Solaris system is missing necessary patches to address a critical security update :

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Kernel). The     supported version that is affected is 11.3. Difficult to     exploit vulnerability allows low privileged attacker     with logon to the infrastructure where Solaris executes     to compromise Solaris. Successful attacks of this     vulnerability can result in unauthorized read access to     a subset of Solaris accessible data. (CVE-2018-2922)

JavaSE 7_x86: update 201 patch (equivalent to JDK 7u201), 64bit.
Date this patch was last updated by Sun : Oct/15/18

JavaSE 7_x86: update 201 patch (equivalent to JDK 7u201).
Date this patch was last updated by Sun : Oct/15/18

JavaSE 6_x86: update 211 patch (equivalent to JDK 6u211), 64bit.
Date this patch was last updated by Sun : Oct/15/18

JavaSE 6_x86: update 211 patch (equivalent to JDK 6u211).
Date this patch was last updated by Sun : Oct/15/18

JavaSE 8_x86: update 192 patch (equivalent.
Date this patch was last updated by Sun : Oct/15/18

JavaSE 8_x86: update 191 patch (equivalent.
Date this patch was last updated by Sun : Oct/15/18

JavaSE 7: update 201 patch (equivalent to JDK 7u201), 64bit.
Date this patch was last updated by Sun : Oct/15/18

JavaSE 7: update 201 patch (equivalent to JDK 7u201).
Date this patch was last updated by Sun : Oct/15/18

JavaSE 6: update 211 patch (equivalent to JDK 6u211), 64bit.
Date this patch was last updated by Sun : Oct/15/18

JavaSE 6: update 211 patch (equivalent to JDK 6u211).
Date this patch was last updated by Sun : Oct/15/18

JavaSE 8: update 192 patch (equivalent to.
Date this patch was last updated by Sun : Oct/15/18

JavaSE 8: update 191 patch (equivalent to.
Date this patch was last updated by Sun : Oct/15/18

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: RPC). Supported versions that are affected are 10 and 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via Portmap v3 to compromise Solaris.
Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Solaris.

SunOS 5.10_x86: OpenSSL 1.0.2 patch.
Date this patch was last updated by Sun : Oct/10/18

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11.3. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks of this vulnerability can result in takeover of Solaris.

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Solaris accessible data.

SunOS 5.10: OpenSSL 1.0.2 patch.
Date this patch was last updated by Sun : Oct/10/18

SunOS 5.10_x86: zebra ripd quagga patch.
Date this patch was last updated by Sun : Sep/24/18

SunOS 5.10: zebra ripd quagga patch.
Date this patch was last updated by Sun : Sep/24/18

This Solaris system is missing necessary patches to address critical security updates :

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Kernel). Supported     versions that are affected are 10 and 11.3. Difficult to     exploit vulnerability allows low privileged attacker     with logon to the infrastructure where Solaris executes     to compromise Solaris. Successful attacks of this     vulnerability can result in takeover of Solaris.
    (CVE-2018-1171)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: NVIDIA-GFX Kernel     driver). The supported version that is affected is 11.3.
    Easily exploitable vulnerability allows low privileged     attacker with network access via ISCSI to compromise     Solaris. Successful attacks of this vulnerability can     result in unauthorized ability to cause a hang or     frequently repeatable crash (complete DOS) of Solaris as     well as unauthorized update, insert or delete access to     some of Solaris accessible data and unauthorized read     access to a subset of Solaris accessible data.
    (CVE-2018-2926)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: RAD). The     supported version that is affected is 11.3. Easily     exploitable vulnerability allows unauthenticated     attacker with network access via multiple protocols to     compromise Solaris. Successful attacks require human     interaction from a person other than the attacker.
    Successful attacks of this vulnerability can result in     unauthorized creation, deletion or modification access     to critical data or all Solaris accessible data as well     as unauthorized access to critical data or complete     access to all Solaris accessible data. (CVE-2018-2928)

This Solaris system is missing necessary patches to address a critical security update :

  - Vulnerability in the Hardware Management Pack component     of Oracle Sun Systems Products Suite (subcomponent:
    Ipmitool). The supported version that is affected is     11.3. Difficult to exploit vulnerability allows     unauthenticated attacker with network access via IPMI to     compromise Hardware Management Pack. Successful attacks     of this vulnerability can result in unauthorized read     access to a subset of Hardware Management Pack     accessible data. (CVE-2018-2906)

This Solaris system is missing necessary patches to address a critical security update :

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Kernel). The     supported version that is affected is 11.3. Easily     exploitable vulnerability allows low privileged attacker     with network access via RPC to compromise Solaris. While     the vulnerability is in Solaris, attacks may     significantly impact additional products. Successful     attacks of this vulnerability can result in unauthorized     ability to cause a hang or frequently repeatable crash     (complete DOS) of Solaris. (CVE-2018-2908)

This Solaris system is missing necessary patches to address a critical security update :

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Availability Suite     Service). Supported versions that are affected are 10     and 11.3. Easily exploitable vulnerability allows low     privileged attacker with logon to the infrastructure     where Solaris executes to compromise Solaris. Successful     attacks of this vulnerability can result in takeover of     Solaris. (CVE-2018-2892)

This Solaris system is missing necessary patches to address a critical security update :

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Kernel). Supported     versions that are affected are 10 and 11.3. Easily     exploitable vulnerability allows high privileged     attacker with logon to the infrastructure where Solaris     executes to compromise Solaris. Successful attacks of     this vulnerability can result in unauthorized access to     critical data or complete access to all Solaris     accessible data. (CVE-2018-2903)

This Solaris system is missing necessary patches to address a critical security update :

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Kernel). Supported     versions that are affected are 10 and 11.2. Difficult to     exploit vulnerability allows unauthenticated attacker     with network access via DHCP to compromise Solaris.
    Successful attacks of this vulnerability can result in     unauthorized ability to cause a partial denial of     service (partial DOS) of Solaris. (CVE-2018-2901)

JavaSE 6_x86: update 201 patch (equivalent to JDK 6u201), 64bit.
Date this patch was last updated by Sun : Jul/16/18

JavaSE 6_x86: update 201 patch (equivalent to JDK 6u201).
Date this patch was last updated by Sun : Jul/16/18

JavaSE 8_x86: update 181 patch (equivalent to JDK 8u181), 64bit.
Date this patch was last updated by Sun : Jul/16/18

JavaSE 7_x86: update 191 patch (equivalent.
Date this patch was last updated by Sun : Jul/16/18

SunOS 5.10_x86: OpenSSL 1.0.2 patch.
Date this patch was last updated by Sun : Jul/16/18

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via DHCP to compromise Solaris.
Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Solaris.

ID	Name	Severity
121221	Oracle Solaris Critical Patch Update : jan2019_SRU11_1_19_6_0	medium
121185	Solaris 10 (x86) : 152928-02	high
121184	Solaris 10 (x86) : 150401-64	medium
121183	Solaris 10 (x86) : 150120-06	medium
121182	Solaris 10 (x86) : 148310-10	high
121181	Solaris 10 (x86) : 136883-09	high
121180	Solaris 10 (x86) : 119784-41	medium
121179	Solaris 10 (sparc) : 152927-02	high
121178	Solaris 10 (sparc) : 150400-64	medium
121177	Solaris 10 (sparc) : 150119-06	medium
121176	Solaris 10 (sparc) : 148309-10	high
121175	Solaris 10 (sparc) : 136882-09	high
121174	Solaris 10 (sparc) : 119783-41	medium
118190	Oracle Solaris Critical Patch Update : oct2018_SRU11_4_1_4_0	high
118189	Oracle Solaris Critical Patch Update : oct2018_SRU11_4_0_0_0	high
118188	Oracle Solaris Critical Patch Update : oct2018_SRU11_3_35_6_0	low
118140	Solaris 10 (x86) : 152926-01	high
118139	Solaris 10 (x86) : 152925-01	high
118138	Solaris 10 (x86) : 152922-11	high
118137	Solaris 10 (x86) : 152921-11	high
118136	Solaris 10 (x86) : 152101-92	medium
118135	Solaris 10 (x86) : 152101-91	high
118134	Solaris 10 (sparc) : 152924-01	high
118133	Solaris 10 (sparc) : 152923-01	high
118132	Solaris 10 (sparc) : 152920-11	high
118131	Solaris 10 (sparc) : 152919-11	high
118130	Solaris 10 (sparc) : 152100-92	medium
118129	Solaris 10 (sparc) : 152100-91	high
118065	Solaris 10 (x86) : 152265-02	medium
118064	Solaris 10 (x86) : 151913-13	high
118063	Solaris 10 (x86) : 150401-63	high
118062	Solaris 10 (sparc) : 152264-02	medium
118061	Solaris 10 (sparc) : 151912-13	high
118060	Solaris 10 (sparc) : 150400-63	high
117684	Solaris 10 (x86) : 126207-13	high
117683	Solaris 10 (sparc) : 126206-13	high
111191	Oracle Solaris Critical Patch Update : jul2018_SRU11_3_34_4_0	high
111190	Oracle Solaris Critical Patch Update : jul2018_SRU11_3_33_5_0	low
111189	Oracle Solaris Critical Patch Update : jul2018_SRU11_3_32_4_0	high
111188	Oracle Solaris Critical Patch Update : jul2018_SRU11_3_31_6_0	high
111187	Oracle Solaris Critical Patch Update : jul2018_SRU11_3_12_4_0	medium
111186	Oracle Solaris Critical Patch Update : jul2018_SRU11_2_11_5_0	low
111133	Solaris 10 (x86) : 152922-01	high
111132	Solaris 10 (x86) : 152921-01	high
111131	Solaris 10 (x86) : 152101-81	high
111130	Solaris 10 (x86) : 152099-91	medium
111129	Solaris 10 (x86) : 152098-91	medium
111128	Solaris 10 (x86) : 151913-12	high
111127	Solaris 10 (x86) : 150401-62	high
111126	Solaris 10 (x86) : 148380-15	low

Detections

Analytics

Solaris Local Security Checks Family for Nessus

medium

high

medium

medium

high

high

medium

high

medium

medium

high

high

medium

high

high

low

high

high

high

high

medium

high

high

high

high

high

medium

high

medium

high

high

medium

high

high

high

high

high

low

high

high

medium

low

high

high

high

medium

medium

high

high

low