https://www.oracle.com/security-alerts/cpujan2020.html

This Solaris system is missing necessary patches to address critical security updates :

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: Consolidation Infrastructure). The     supported version that is affected is 11. Difficult to     exploit vulnerability allows low privileged attacker     with logon to the infrastructure where Oracle Solaris     executes to compromise Oracle Solaris. Successful     attacks require human interaction from a person other     than the attacker and while the vulnerability is in     Oracle Solaris, attacks may significantly impact     additional products. Successful attacks of this     vulnerability can result in takeover of Oracle Solaris.
    (CVE-2020-2565)

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: Filesystem). The supported version     that is affected is 11. Easily exploitable vulnerability     allows low privileged attacker with logon to the     infrastructure where Oracle Solaris executes to     compromise Oracle Solaris. Successful attacks of this     vulnerability can result in unauthorized creation,     deletion or modification access to critical data or all     Oracle Solaris accessible data and unauthorized ability     to cause a hang or frequently repeatable crash (complete     DOS) of Oracle Solaris. (CVE-2020-2605)

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: Filesystem). The supported version     that is affected is 11. Easily exploitable vulnerability     allows low privileged attacker with logon to the     infrastructure where Oracle Solaris executes to     compromise Oracle Solaris. Successful attacks require     human interaction from a person other than the attacker     and while the vulnerability is in Oracle Solaris,     attacks may significantly impact additional products.
    Successful attacks of this vulnerability can result in     unauthorized update, insert or delete access to some of     Oracle Solaris accessible data as well as unauthorized     read access to a subset of Oracle Solaris accessible     data. (CVE-2020-2664)

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: Filesystem). The supported version     that is affected is 11. Easily exploitable vulnerability     allows high privileged attacker with logon to the     infrastructure where Oracle Solaris executes to     compromise Oracle Solaris. While the vulnerability is in     Oracle Solaris, attacks may significantly impact     additional products. Successful attacks of this     vulnerability can result in unauthorized ability to     cause a hang or frequently repeatable crash (complete     DOS) of Oracle Solaris. (CVE-2020-2680)

CVE-2020-2605

high

Tenable Plugins

high