This Solaris system is missing necessary patches to address a critical security update :

  - Vulnerability in the Oracle Solaris product of Oracle     Sun Systems Products Suite (component: Kernel).
    Supported versions that are affected are 11.4 and 11.3.
    Easily exploitable vulnerability allows unauthenticated     attacker with network access via IPv6 to compromise     Oracle Solaris. Successful attacks of this vulnerability     can result in unauthorized creation, deletion or     modification access to critical data or all Oracle     Solaris accessible data and unauthorized ability to     cause a hang or frequently repeatable crash (complete     DOS) of Oracle Solaris. (CVE-2019-5597)

Vulnerability in the Oracle Solaris product of Oracle Sun Systems Products Suite (component: Common Desktop Environment). The supported version that is affected is 10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Solaris.

Vulnerability in the Oracle Solaris product of Oracle Sun Systems Products Suite (component: Filesystem). Supported versions that are affected are 11.4 and 10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks require human interaction from a person other than the attacker.
Successful attacks of this vulnerability can result in takeover of Oracle Solaris.

SunOS 5.10_x86: Apache 2.4 Patch.
Date this patch was last updated by Sun : Jul/15/19

SunOS 5.10_x86: Tomcat 8 patch.
Date this patch was last updated by Sun : Jul/15/19

SunOS 5.10_x86: rsync Patch.
Date this patch was last updated by Sun : Jul/15/19

SunOS 5.10_x86: OpenSSL 1.0.2 patch.
Date this patch was last updated by Sun : Jul/15/19

Vulnerability in the Oracle Solaris product of Oracle Sun Systems Products Suite (component: Automount). Supported versions that are affected are 11.4 and 10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via NFS to compromise Oracle Solaris. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Solaris accessible data as well as unauthorized read access to a subset of Oracle Solaris accessible data.

SunOS 5.10_x86: ImageMagick patch.
Date this patch was last updated by Sun : Jul/15/19

SunOS 5.10_x86: XML and XSLT libraries patch.
Date this patch was last updated by Sun : Jul/15/19

Vulnerability in the Solaris component of Oracle Sun Products Suite (subcomponent: Bind/Postinstall script for Bind package). The supported version that is affected is 10. Very difficult to exploit vulnerability requiring logon to Operating System plus additional login/authentication to component or subcomponent. Successful attack of this vulnerability can escalate attacker privileges resulting in unauthorized Operating System takeover including arbitrary code execution.

SunOS 5.10: Apache 2.4 Patch.
Date this patch was last updated by Sun : Jul/15/19

SunOS 5.10: Tomcat 8 patch.
Date this patch was last updated by Sun : Jul/15/19

SunOS 5.10: rsync Patch.
Date this patch was last updated by Sun : Jul/15/19

SunOS 5.10: OpenSSL 1.0.2 patch.
Date this patch was last updated by Sun : Jul/15/19

SunOS 5.10: ImageMagick patch.
Date this patch was last updated by Sun : Jul/15/19

SunOS 5.10: XML and XSLT libraries patch.
Date this patch was last updated by Sun : Jul/15/19

SunOS 5.10_x86: Ant patch.
Date this patch was last updated by Sun : Jul/10/19

SunOS 5.10: Ant patch.
Date this patch was last updated by Sun : Jul/10/19

This Solaris system is missing necessary patches to address a critical security update :

  - Vulnerability in the Oracle Solaris component of Oracle     Sun Systems Products Suite (subcomponent: IPS Package     Manager). The supported version that is affected is 11.
    Easily exploitable vulnerability allows unauthenticated     attacker with network access via HTTP to compromise     Oracle Solaris. Successful attacks of this vulnerability     can result in unauthorized read access to a subset of     Oracle Solaris accessible data. (CVE-2019-2704)

This Solaris system is missing necessary patches to address a critical security update :

  - Vulnerability in the Oracle Solaris component of Oracle     Sun Systems Products Suite (subcomponent: File Locking     Services). The supported version that is affected is 11.
    Easily exploitable vulnerability allows low privileged     attacker with logon to the infrastructure where Oracle     Solaris executes to compromise Oracle Solaris.
    Successful attacks of this vulnerability can result in     unauthorized ability to cause a partial denial of     service (partial DOS) of Oracle Solaris. (CVE-2019-2577)

SunOS 5.10_x86: OpenSSL 1.0.2 patch.
Date this patch was last updated by Sun : Apr/15/19

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: SunSSH). The supported version that is affected is 10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSH to compromise Oracle Solaris. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Solaris accessible data.

SunOS 5.10_x86: Kerberos patch.
Date this patch was last updated by Sun : Apr/15/19

SunOS 5.10_x86: SunFreeware ntp patch.
Date this patch was last updated by Sun : Apr/15/19

SunOS 5.10: OpenSSL 1.0.2 patch.
Date this patch was last updated by Sun : Apr/15/19

SunOS 5.10: Kerberos patch.
Date this patch was last updated by Sun : Apr/15/19

SunOS 5.10: SunFreeware ntp patch.
Date this patch was last updated by Sun : Apr/15/19

This Solaris system is missing necessary patches to address critical security updates :

  - Vulnerability in the Oracle Solaris component of Oracle     Sun Systems Products Suite (subcomponent: Kernel). The     supported version that is affected is 11. Easily     exploitable vulnerability allows unauthenticated     attacker with network access via TCP to compromise     Oracle Solaris. Successful attacks of this vulnerability     can result in unauthorized ability to cause a hang or     frequently repeatable crash (complete DOS) of Oracle     Solaris. (CVE-2019-2437)

  - Vulnerability in the Oracle Solaris component of Oracle     Sun Systems Products Suite (subcomponent: Kernel). The     supported version that is affected is 11. Difficult to     exploit vulnerability allows low privileged attacker     with logon to the infrastructure where Oracle Solaris     executes to compromise Oracle Solaris. While the     vulnerability is in Oracle Solaris, attacks may     significantly impact additional products. Successful     attacks of this vulnerability can result in unauthorized     access to critical data or complete access to all Oracle     Solaris accessible data. (CVE-2018-3646)

  - Vulnerability in the Oracle Communications LSMS product     of Oracle Communications Applications (component:
    Kernel). Supported versions that are affected are     13.0-13.3. Easily exploitable vulnerability allows low     privileged attacker with logon to the infrastructure     where Oracle Communications LSMS executes to compromise     Oracle Communications LSMS. Successful attacks of this     vulnerability can result in unauthorized access to     critical data or complete access to all Oracle     Communications LSMS accessible data. CVSS 3.1 Base Score     5.5 (Confidentiality impacts). CVSS Vector:
    (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).
    (CVE-2018-3639)

This Solaris system is missing necessary patches to address a critical security update :

  - Vulnerability in the Oracle Solaris component of Oracle     Sun Systems Products Suite (subcomponent: LDoms IO).
    Supported versions that are affected are 10 and 11.
    Easily exploitable vulnerability allows unauthenticated     attacker with logon to the infrastructure where Oracle     Solaris executes to compromise Oracle Solaris.
    Successful attacks of this vulnerability can result in     unauthorized ability to cause a partial denial of     service (partial DOS) of Oracle Solaris. (CVE-2019-2545)

This Solaris system is missing necessary patches to address critical security updates :

  - Vulnerability in the Oracle Solaris component of Oracle     Sun Systems Products Suite (subcomponent: Kernel).
    Supported versions that are affected are 10 and 11.
    Easily exploitable vulnerability allows unauthenticated     attacker with network access via KSSL to compromise     Oracle Solaris. Successful attacks of this vulnerability     can result in unauthorized read access to a subset of     Oracle Solaris accessible data. (CVE-2019-2543)

  - Vulnerability in the Oracle Solaris component of Oracle     Sun Systems Products Suite (subcomponent: Kernel).
    Supported versions that are affected are 10 and 11.
    Easily exploitable vulnerability allows unauthenticated     attacker with logon to the infrastructure where Oracle     Solaris executes to compromise Oracle Solaris.
    Successful attacks of this vulnerability can result in     unauthorized read access to a subset of Oracle Solaris     accessible data. (CVE-2019-2544)

JavaSE 8_x86: update 202 patch (equivalent to JDK 8u202), 64bit.
Date this patch was last updated by Sun : Jan/14/19

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Solaris accessible data.

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via KSSL to compromise Oracle Solaris. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Solaris accessible data.

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: DHCP Client). The supported version that is affected is 10. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Solaris executes to compromise Oracle Solaris. Successful attacks of this vulnerability can result in takeover of Oracle Solaris.

SunOS 5.10_x86: ImageMagick patch.
Date this patch was last updated by Sun : Jan/14/19

JavaSE 8: update 202 patch (equivalent to JDK 8u202), 64bit.
Date this patch was last updated by Sun : Jan/14/19

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Solaris accessible data.

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: LDoms IO). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Solaris.

SunOS 5.10: ImageMagick patch.
Date this patch was last updated by Sun : Jan/14/19

This Solaris system is missing necessary patches to address critical security updates :

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Kernel). The     supported version that is affected is 11.4. Easily     exploitable vulnerability allows unauthenticated     attacker with network access via multiple protocols to     compromise Solaris. Successful attacks of this     vulnerability can result in unauthorized access to     critical data or complete access to all Solaris     accessible data. (CVE-2016-5244)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Kernel). The     supported version that is affected is 11.4. Easily     exploitable vulnerability allows low privileged attacker     with logon to the infrastructure where Solaris executes     to compromise Solaris. Successful attacks of this     vulnerability can result in unauthorized ability to     cause a hang or frequently repeatable crash (complete     DOS) of Solaris. (CVE-2015-6937)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: RPC). Supported     versions that are affected are 10 and 11.4. Easily     exploitable vulnerability allows unauthenticated     attacker with network access via Portmap v3 to     compromise Solaris. Successful attacks of this     vulnerability can result in unauthorized ability to     cause a partial denial of service (partial DOS) of     Solaris. (CVE-2018-3172)

This Solaris system is missing necessary patches to address critical security updates :

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Remote     Administration Daemon (RAD)). The supported version that     is affected is 11.3. Easily exploitable vulnerability     allows unauthenticated attacker with network access via     multiple protocols to compromise Solaris. Successful     attacks require human interaction from a person other     than the attacker. Successful attacks of this     vulnerability can result in unauthorized creation,     deletion or modification access to critical data or all     Solaris accessible data as well as unauthorized access     to critical data or complete access to all Solaris     accessible data. (CVE-2018-3273)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: LibKMIP). The     supported version that is affected is 11.3. Difficult to     exploit vulnerability allows unauthenticated attacker     with network access via multiple protocols to compromise     Solaris. Successful attacks of this vulnerability can     result in unauthorized creation, deletion or     modification access to critical data or all Solaris     accessible data as well as unauthorized access to     critical data or complete access to all Solaris     accessible data. (CVE-2018-3275)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Kernel Zones     Virtualized NIC Driver). The supported version that is     affected is 11.3. Easily exploitable vulnerability     allows unauthenticated attacker with logon to the     infrastructure where Solaris executes to compromise     Solaris. Successful attacks of this vulnerability can     result in unauthorized ability to cause a hang or     frequently repeatable crash (complete DOS) of Solaris.
    (CVE-2018-3272)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Kernel). The     supported version that is affected is 11.3. Easily     exploitable vulnerability allows low privileged attacker     with network access via SMB to compromise Solaris.
    Successful attacks require human interaction from a     person other than the attacker. Successful attacks of     this vulnerability can result in unauthorized ability to     cause a hang or frequently repeatable crash (complete     DOS) of Solaris. (CVE-2018-3274)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Sudo). The     supported version that is affected is 11.3. Difficult to     exploit vulnerability allows unauthenticated attacker     with network access via multiple protocols to compromise     Solaris. Successful attacks of this vulnerability can     result in unauthorized update, insert or delete access     to some of Solaris accessible data as well as     unauthorized read access to a subset of Solaris     accessible data and unauthorized ability to cause a     partial denial of service (partial DOS) of Solaris.
    (CVE-2018-3263)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: LFTP). The     supported version that is affected is 11.3. Easily     exploitable vulnerability allows unauthenticated     attacker with network access via FTP to compromise     Solaris. Successful attacks of this vulnerability can     result in unauthorized read access to a subset of     Solaris accessible data. (CVE-2018-3267)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Kernel Zones). The     supported version that is affected is 11.3. Difficult to     exploit vulnerability allows high privileged attacker     with logon to the infrastructure where Solaris executes     to compromise Solaris. While the vulnerability is in     Solaris, attacks may significantly impact additional     products. Successful attacks of this vulnerability can     result in unauthorized ability to cause a hang or     frequently repeatable crash (complete DOS) of Solaris.
    (CVE-2018-3271)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: SMB Server). The     supported version that is affected is 11.3. Easily     exploitable vulnerability allows unauthenticated     attacker with network access via SMB to compromise     Solaris. Successful attacks of this vulnerability can     result in unauthorized ability to cause a partial denial     of service (partial DOS) of Solaris. (CVE-2018-3268)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Zones). The     supported version that is affected is 11.3. Difficult to     exploit vulnerability allows unauthenticated attacker     with logon to the infrastructure where Solaris executes     to compromise Solaris. Successful attacks of this     vulnerability can result in unauthorized update, insert     or delete access to some of Solaris accessible data as     well as unauthorized read access to a subset of Solaris     accessible data and unauthorized ability to cause a     partial denial of service (partial DOS) of Solaris.
    (CVE-2018-3265)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Kernel). The     supported version that is affected is 11.3. Easily     exploitable vulnerability allows low privileged attacker     with logon to the infrastructure where Solaris executes     to compromise Solaris. Successful attacks of this     vulnerability can result in unauthorized update, insert     or delete access to some of Solaris accessible data and     unauthorized ability to cause a partial denial of     service (partial DOS) of Solaris. (CVE-2018-3264)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: SMB Server). The     supported version that is affected is 11.3. Easily     exploitable vulnerability allows low privileged attacker     with network access via SMB to compromise Solaris.
    Successful attacks of this vulnerability can result in     unauthorized ability to cause a partial denial of     service (partial DOS) of Solaris. (CVE-2018-3269)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Verified Boot).
    The supported version that is affected is 11.3.
    Difficult to exploit vulnerability allows high     privileged attacker with logon to the infrastructure     where Solaris executes to compromise Solaris. Successful     attacks of this vulnerability can result in unauthorized     update, insert or delete access to some of Solaris     accessible data as well as unauthorized read access to a     subset of Solaris accessible data and unauthorized     ability to cause a partial denial of service (partial     DOS) of Solaris. (CVE-2018-3266)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Kernel). The     supported version that is affected is 11.3. Difficult to     exploit vulnerability allows high privileged attacker     with logon to the infrastructure where Solaris executes     to compromise Solaris. Successful attacks require human     interaction from a person other than the attacker.
    Successful attacks of this vulnerability can result in     unauthorized ability to cause a partial denial of     service (partial DOS) of Solaris. (CVE-2018-3270)

ID	Name	Severity
126764	Oracle Solaris Critical Patch Update : jul2019_SRU11_3_36_13_0	critical
126735	Solaris 10 (x86) : 153061-01	high
126734	Solaris 10 (x86) : 153057-01	high
126733	Solaris 10 (x86) : 152644-07	high
126732	Solaris 10 (x86) : 152511-08	high
126731	Solaris 10 (x86) : 152249-02	high
126730	Solaris 10 (x86) : 151913-15	high
126729	Solaris 10 (x86) : 150380-02	medium
126728	Solaris 10 (x86) : 136883-10	high
126727	Solaris 10 (x86) : 125732-15	critical
126726	Solaris 10 (x86) : 119784-42	medium
126725	Solaris 10 (sparc) : 153060-01	high
126724	Solaris 10 (sparc) : 153056-01	high
126723	Solaris 10 (sparc) : 152643-07	high
126722	Solaris 10 (sparc) : 152510-08	high
126721	Solaris 10 (sparc) : 152248-02	high
126720	Solaris 10 (sparc) : 151912-15	high
126719	Solaris 10 (sparc) : 150379-02	medium
126718	Solaris 10 (sparc) : 136882-10	high
126717	Solaris 10 (sparc) : 125731-15	critical
126716	Solaris 10 (sparc) : 119783-42	medium
126616	Solaris 10 (x86) : 144995-04	medium
126615	Solaris 10 (sparc) : 144994-04	medium
124154	Oracle Solaris Critical Patch Update : apr2019_SRU11_4_8_5_0	medium
124153	Oracle Solaris Critical Patch Update : apr2019_SRU11_4_6_4_0	low
124080	Solaris 10 (x86) : 151913-14	high
124079	Solaris 10 (x86) : 148105-29	medium
124078	Solaris 10 (x86) : 147794-23	high
124077	Solaris 10 (x86) : 143726-12	high
124076	Solaris 10 (sparc) : 151912-14	high
124075	Solaris 10 (sparc) : 148104-29	medium
124074	Solaris 10 (sparc) : 147793-23	high
124073	Solaris 10 (sparc) : 143725-12	high
121223	Oracle Solaris Critical Patch Update : jan2019_SRU11_4_3_5_0 (Foreshadow) (Spectre)	medium
121222	Oracle Solaris Critical Patch Update : jan2019_SRU11_4_0_0_0	medium
121221	Oracle Solaris Critical Patch Update : jan2019_SRU11_1_19_6_0	medium
121185	Solaris 10 (x86) : 152928-02	high
121184	Solaris 10 (x86) : 150401-64	medium
121183	Solaris 10 (x86) : 150120-06	medium
121182	Solaris 10 (x86) : 148310-10	high
121181	Solaris 10 (x86) : 136883-09	high
121180	Solaris 10 (x86) : 119784-41	medium
121179	Solaris 10 (sparc) : 152927-02	high
121178	Solaris 10 (sparc) : 150400-64	medium
121177	Solaris 10 (sparc) : 150119-06	medium
121176	Solaris 10 (sparc) : 148309-10	high
121175	Solaris 10 (sparc) : 136882-09	high
121174	Solaris 10 (sparc) : 119783-41	medium
118190	Oracle Solaris Critical Patch Update : oct2018_SRU11_4_1_4_0	high
118189	Oracle Solaris Critical Patch Update : oct2018_SRU11_4_0_0_0	high

Detections

Analytics

Solaris Local Security Checks Family for Nessus

critical

high

high

high

high

high

high

medium

high

critical

medium

high

high

high

high

high

high

medium

high

critical

medium

medium

medium

medium

low

high

medium

high

high

high

medium

high

high

medium

medium

medium

high

medium

medium

high

high

medium

high

medium

medium

high

high

medium

high

high