CVE-2016-0414 - Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, int

CVE-2016-0414

Summary

Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Solaris Kernel Zones, a different vulnerability than CVE-2016-0418. Per Oracle: Unsupported Solaris 11.x versions should be upgraded to a supported release or patch set. Refer to the Critical Patch Update January 2015 Patch Availability Document for Oracle Sun Systems Products Suite.

References

Vulnerable Configurations

cpe:2.3:o:oracle:solaris:11:*:*:*:*:*:*:*
cpe:2.3:o:oracle:solaris:11:*:*:*:*:*:*:*

CVSS

Base:	7.2 (as of 07-12-2016 - 18:30)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:L/AC:L/Au:N/C:C/I:C/A:C

refmap via4

confirm	http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
sectrack	1034735

Last major update

07-12-2016 - 18:30

Published

21-01-2016 - 02:59

Last modified

07-12-2016 - 18:30