Denial of Service Vulnerability in Oracle Solaris Kernel by Oracle
CVE-2023-22129

5.5MEDIUM

Key Information:

Vendor

Oracle
Status
Solaris Operating System
Vendor
CVE Published:
17 October 2023

What is CVE-2023-22129?

A vulnerability in Oracle Solaris, specifically within the kernel component, affects version 11. This issue allows a low-privileged attacker with logon access to the environment where Oracle Solaris operates to exploit the system. An attacker can execute a sequence of operations that causes the operating system to become unresponsive or prone to frequent crashes, resulting in a Denial of Service (DoS). This vulnerability uniquely affects SPARC Systems and could lead to significant service disruption.

Affected Version(s)

Solaris Operating System 11

References

https://www.oracle.com/security-alerts/cpuoct2023.html
vendor-advisory

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.