NSS_NSPR_JSS 3.35: NSPR 4.18 / NSS 3.35 / JSS 4.3.2.
Date this patch was last updated by Sun : May/16/18

GNOME 2.6.0_x86: Python patch.
Date this patch was last updated by Sun : May/15/18

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Availability Suite Service). Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks of this vulnerability can result in takeover of Solaris.

GNOME 2.6.0: Python patch.
Date this patch was last updated by Sun : May/15/18

This Solaris system is missing necessary patches to address a critical security update :

  - Vulnerability in the Oracle Communications LSMS     component of Oracle Communications Applications     (subcomponent: Platform (Kernel)). Supported versions     that are affected are 13.1, 13.2 and 13.3. Difficult to     exploit vulnerability allows low privileged attacker     with logon to the infrastructure where Oracle     Communications LSMS executes to compromise Oracle     Communications LSMS. While the vulnerability is in     Oracle Communications LSMS, attacks may significantly     impact additional products. Successful attacks of this     vulnerability can result in unauthorized access to     critical data or complete access to all Oracle     Communications LSMS accessible data. (CVE-2017-5753)

This Solaris system is missing necessary patches to address critical security updates :

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: NTPD). The     supported version that is affected is 11.3. Easily     exploitable vulnerability allows low privileged attacker     with logon to the infrastructure where Solaris executes     to compromise Solaris. Successful attacks of this     vulnerability can result in unauthorized update, insert     or delete access to some of Solaris accessible data.
    (CVE-2018-2763)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Kernel). Supported     versions that are affected are 10 and 11.3. Easily     exploitable vulnerability allows unauthenticated     attacker with network access via NFS to compromise     Solaris. Successful attacks of this vulnerability can     result in unauthorized ability to cause a hang or     frequently repeatable crash (complete DOS) of Solaris.
    (CVE-2018-2764)

  - Vulnerability in the Hardware Management Pack component     of Oracle Sun Systems Products Suite (subcomponent:
    Ipmitool). The supported version that is affected is     Prior to 2.4.3. Easily exploitable vulnerability allows     high privileged attacker with network access via     multiple protocols to compromise Hardware Management     Pack. Successful attacks of this vulnerability can     result in unauthorized update, insert or delete access     to some of Hardware Management Pack accessible data as     well as unauthorized read access to a subset of Hardware     Management Pack accessible data. (CVE-2018-2792)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Kernel). The     supported version that is affected is 11.3. Easily     exploitable vulnerability allows low privileged attacker     with logon to the infrastructure where Solaris executes     to compromise Solaris. Successful attacks require human     interaction from a person other than the attacker.
    Successful attacks of this vulnerability can result in     unauthorized ability to cause a hang or frequently     repeatable crash (complete DOS) of Solaris.
    (CVE-2018-2808)

This Solaris system is missing necessary patches to address critical security updates :

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Python modules).
    The supported version that is affected is 11.3.
    Difficult to exploit vulnerability allows low privileged     attacker with logon to the infrastructure where Solaris     executes to compromise Solaris. Successful attacks     require human interaction from a person other than the     attacker. Successful attacks of this vulnerability can     result in unauthorized creation, deletion or     modification access to critical data or all Solaris     accessible data as well as unauthorized access to     critical data or complete access to all Solaris     accessible data. (CVE-2018-2753)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: ZVNET Driver). The     supported version that is affected is 11.3. Easily     exploitable vulnerability allows unauthenticated     attacker with logon to the infrastructure where Solaris     executes to compromise Solaris. Successful attacks of     this vulnerability can result in unauthorized creation,     deletion or modification access to critical data or all     Solaris accessible data and unauthorized ability to     cause a hang or frequently repeatable crash (complete     DOS) of Solaris. (CVE-2018-2754)

This Solaris system is missing necessary patches to address a critical security update :

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: RPC). Supported     versions that are affected are 10 and 11.3. Easily     exploitable vulnerability allows unauthenticated     attacker with network access via NFS to compromise     Solaris. Successful attacks of this vulnerability can     result in unauthorized ability to cause a hang or     frequently repeatable crash (complete DOS) of Solaris.
    (CVE-2018-2718)

This Solaris system is missing necessary patches to address a critical security update :

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: LDAP Library).
    Supported versions that are affected are 10 and 11.3.
    Difficult to exploit vulnerability allows low privileged     attacker with network access via LDAP to compromise     Solaris. Successful attacks of this vulnerability can     result in unauthorized update, insert or delete access     to some of Solaris accessible data as well as     unauthorized read access to a subset of Solaris     accessible data. (CVE-2018-2563)

SunOS 5.10_x86: Apache 2.4 Patch.
Date this patch was last updated by Sun : Apr/16/18

SunOS 5.10_x86: Tomcat 8 patch.
Date this patch was last updated by Sun : Apr/16/18

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: RPC). Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via NFS to compromise Solaris. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Solaris.

JavaSE 6_x86: update 191 patch (equivalent.
Date this patch was last updated by Sun : Apr/16/18

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: LDAP Library). Supported versions that are affected are 10 and 11.3. Difficult to exploit vulnerability allows low privileged attacker with network access via LDAP to compromise Solaris. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Solaris accessible data as well as unauthorized read access to a subset of Solaris accessible data.

SunOS 5.10: Apache 2.4 Patch.
Date this patch was last updated by Sun : Apr/16/18

SunOS 5.10: Tomcat 8 patch.
Date this patch was last updated by Sun : Apr/16/18

JavaSE 6: update 191 patch (equivalent to.
Date this patch was last updated by Sun : Apr/16/18

GNOME 2.6.0_x86: libgdk-pixbuf-2.0.so patch.
Date this patch was last updated by Sun : Nov/09/17

GNOME 2.6.0_x86: libgdk-pixbuf-2.0.so patc.
Date this patch was last updated by Sun : May/11/17

GNOME 2.6.0_x86: libgdk-x11-2.0.so patch.
Date this patch was last updated by Sun : May/11/17

SunOS 5.10_x86: Apache 2.4 Patch.
Date this patch was last updated by Sun : Sep/06/17

SunOS 5.10_x86: Apache 2.4 Patch.
Date this patch was last updated by Sun : Mar/09/17

SunOS 5.10_x86: Tomcat 6 Patch.
Date this patch was last updated by Sun : Jun/15/17

SunOS 5.10_x86: Tomcat 6 Patch.
Date this patch was last updated by Sun : Feb/09/17

SunOS 5.10_x86: Tomcat 8 patch.
Date this patch was last updated by Sun : Sep/06/17

SunOS 5.10_x86: Tomcat 8 patch.
Date this patch was last updated by Sun : Jun/15/17

SunOS 5.10_x86: Tomcat 8 patch.
Date this patch was last updated by Sun : Feb/09/17

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11.3. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Solaris accessible data.

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 10. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Solaris.

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Utilities). Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via RPC to compromise Solaris. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Solaris.

SunOS 5.10_x86: libnsl patch.
Date this patch was last updated by Sun : Oct/16/17

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Network Services Library). The supported version that is affected is 10. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Solaris accessible data as well as unauthorized read access to a subset of Solaris accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Solaris.

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: RPC). Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows successful unauthenticated network attacks via RPC. Successful attack of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Solaris.

SunOS 5.10_x86: sudo Source Patch.
Date this patch was last updated by Sun : Apr/20/16

SunOS 5.10_x86: sudo Patch.
Date this patch was last updated by Sun : Feb/09/17

SunOS 5.10_x86: sudo Patch.
Date this patch was last updated by Sun : Apr/20/16

SunOS 5.10_x86: rsync Source Patch.
Date this patch was last updated by Sun : Dec/17/15

SunOS 5.10_x86: rsync Patch.
Date this patch was last updated by Sun : Dec/17/15

JavaSE 8_x86: update 152 patch (equivalent to JDK 8u152), 64bit.
Date this patch was last updated by Sun : Oct/16/17

JavaSE 8_x86: update 131 patch (equivalent to JDK 8u131), 64bit.
Date this patch was last updated by Sun : Apr/17/17

JavaSE 8_x86: update 121 patch (equivalent to JDK 8u121), 64bit.
Date this patch was last updated by Sun : Jan/16/17

JavaSE 8_x86: update 112 patch (equivalent to JDK 8u112), 64bit.
Date this patch was last updated by Sun : Oct/17/16

JavaSE 7_x86: update 171 patch (equivalent to JDK 7u171), 64bit.
Date this patch was last updated by Sun : Jan/16/18

JavaSE 7_x86: update 161 patch (equivalent to JDK 7u161), 64bit.
Date this patch was last updated by Sun : Oct/16/17

JavaSE 7_x86: update 131 patch (equivalent to JDK 7u131), 64bit.
Date this patch was last updated by Sun : Jan/16/17

ID	Name	Severity
109882	Solaris 10 (sparc) : 119213-38	medium
109858	Solaris 10 (x86) : 143507-13	high
109857	Solaris 10 (x86) : 123247-11	high
109856	Solaris 10 (sparc) : 143506-13	high
109855	Solaris 10 (sparc) : 123246-11	high
109176	Oracle Solaris Critical Patch Update : apr2018_SRU11_3_31_6_0 (Spectre)	medium
109175	Oracle Solaris Critical Patch Update : apr2018_SRU11_3_30_5_0	high
109174	Oracle Solaris Critical Patch Update : apr2018_SRU11_3_29_5_0	high
109173	Oracle Solaris Critical Patch Update : apr2018_SRU11_3_28_4_0	high
109172	Oracle Solaris Critical Patch Update : apr2018_SRU11_3_27_4_0	medium
109082	Solaris 10 (x86) : 152644-06	high
109081	Solaris 10 (x86) : 152511-07	high
109080	Solaris 10 (x86) : 152261-04	high
109079	Solaris 10 (x86) : 152079-91	medium
109078	Solaris 10 (x86) : 152078-91	medium
109077	Solaris 10 (x86) : 150378-07	medium
109076	Solaris 10 (sparc) : 152643-06	high
109075	Solaris 10 (sparc) : 152510-07	high
109074	Solaris 10 (sparc) : 152260-04	high
109073	Solaris 10 (sparc) : 152077-91	medium
109072	Solaris 10 (sparc) : 152076-91	medium
109071	Solaris 10 (sparc) : 150377-07	medium
108267	Solaris 10 (x86) : 152725-02	high
108266	Solaris 10 (x86) : 152725-01	high
108265	Solaris 10 (x86) : 152652-01	high
108264	Solaris 10 (x86) : 152644-05	high
108263	Solaris 10 (x86) : 152644-03	high
108262	Solaris 10 (x86) : 152515-02	high
108261	Solaris 10 (x86) : 152515-01	high
108260	Solaris 10 (x86) : 152511-06	high
108259	Solaris 10 (x86) : 152511-04	high
108258	Solaris 10 (x86) : 152511-03	high
108257	Solaris 10 (x86) : 152507-01	medium
108256	Solaris 10 (x86) : 152364-01	medium
108255	Solaris 10 (x86) : 152265-01	high
108254	Solaris 10 (x86) : 152261-03	high
108253	Solaris 10 (x86) : 152261-02	medium
108252	Solaris 10 (x86) : 152261-01	medium
108251	Solaris 10 (x86) : 152255-01	medium
108250	Solaris 10 (x86) : 152253-02	high
108249	Solaris 10 (x86) : 152253-01	high
108248	Solaris 10 (x86) : 152251-01	medium
108247	Solaris 10 (x86) : 152249-01	high
108246	Solaris 10 (x86) : 152101-52	high
108245	Solaris 10 (x86) : 152101-31	high
108244	Solaris 10 (x86) : 152101-21	high
108243	Solaris 10 (x86) : 152101-12	medium
108242	Solaris 10 (x86) : 152099-71	high
108241	Solaris 10 (x86) : 152099-61	high
108240	Solaris 10 (x86) : 152099-31	high

Detections

Analytics

Solaris Local Security Checks Family for Nessus

medium

high

high

high

high

medium

high

high

high

medium

high

high

high

medium

medium

medium

high

high

high

medium

medium

medium

high

high

high

high

high

high

high

high

high

high

medium

medium

high

high

medium

medium

medium

high

high

medium

high

high

high

high

medium

high

high

high