SB2018072611 - Privilege escalation in Oracle Solaris

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2018072611

SB2018072611 - Privilege escalation in Oracle Solaris

Published: July 26, 2018

Security Bulletin ID SB2018072611
Severity
Low
Patch available
NO
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Code execution

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Privilege escalation (CVE-ID: CVE-2018-2892)

The vulnerability allows a local attacker to gain elevated privileges on the target system.

The weakness exists in the Oracle Solaris AVS kernel component due to a signedness bug in the bounds checking of the ‘SDBC_TEST_INIT’ ioctlcode sent to the ‘/dev/sdbc‘ device. A local attacker can perform a special call to copyin() with a user controllable destination pointer and length, facilitate an arbitrary kernel memory overwrite, and execute arbitrary code in the context of kernel.

Successful exploitation of the vulnerability may result in system compromise.


Remediation

Cybersecurity Help is not aware of any official remediation provided by the vendor.

References