The kernel in Sun Solaris 8, 9, and 10, and OpenSolaris before snv_103, does not properly handle interaction between the filesystem and virtual-memory implementations, which allows local users to cause a denial of service (deadlock and system halt) via vectors involving mmap and write operations on the same file.

Threat-Mapped Scoring

Score: 1.5

Priority: P4 - Informational (Low)

• S10 – Denial of Service

EPSS

Score: 0.00111
Percentile: 0.30456

CVSS Scoring

Mapped CWE(s)

• CWE-667 : Improper Locking

All CAPEC(s)

CAPEC(s) with Mapped TTPs

Mapped ATT&CK TTPs

• T1499.004 : Application or System Exploitation
  Kill Chain: impact

Malware

APTs Threat Group Associations

Campaigns

Affected Products

• cpe:2.3:o:oracle:opensolaris:*:*:*:*:*:*:*:*
• cpe:2.3:o:oracle:solaris:8:*:*:*:*:*:*:*
• cpe:2.3:o:oracle:solaris:9:*:*:*:*:*:*:*
• cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*

← Back to Home