Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect availability via vectors related to NFSv4.

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: NFSv4). Supported versions that are affected are 10 and 11.2. Difficult to exploit vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Solaris.

This Solaris system is missing necessary patches to address critical security updates :

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: NFSv4). Supported     versions that are affected are 10 and 11.2. Difficult to     exploit vulnerability requiring logon to Operating     System. Successful attack of this vulnerability can     result in unauthorized ability to cause a hang or     frequently repeatable crash (complete DOS) of Solaris.
    (CVE-2015-2580)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: CPU performance     counters drivers). The supported version that is     affected is 11.2. Easily exploitable vulnerability     requiring logon to Operating System. Successful attack     of this vulnerability can result in unauthorized     Operating System hang or frequently repeatable crash     (complete DOS). (CVE-2015-2609)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: NVM Express SSD     driver). The supported version that is affected is 11.2.
    Easily exploitable vulnerability requiring logon to     Operating System. Successful attack of this     vulnerability can result in unauthorized Operating     System hang or frequently repeatable crash (complete     DOS). (CVE-2015-2614)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: rmformat Utility).
    Supported versions that are affected are 10 and 11.2.
    Easily exploitable vulnerability requiring logon to     Operating System. Successful attack of this     vulnerability can result in unauthorized Operating     System takeover including arbitrary code execution.
    (CVE-2015-2631)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: DHCP Server).
    Supported versions that are affected are 10 and 11.2.
    Difficult to exploit vulnerability requiring logon to     Operating System. Successful attack of this     vulnerability can result in unauthorized ability to     cause a partial denial of service (partial DOS) of     Solaris. (CVE-2015-2662)

ID	Name	Product	Family	Severity
108194	Solaris 10 (x86) : 150401-24	Nessus	Solaris Local Security Checks	low
107712	Solaris 10 (sparc) : 150400-24	Nessus	Solaris Local Security Checks	low
84759	Oracle Solaris Critical Patch Update : jul2015_SRU11_2_10_5_0	Nessus	Solaris Local Security Checks	high

Detections

Analytics

CVE-2015-2580

medium

Tenable Plugins

low

low

high