ID:6343 - Exploit for Privilege escalation in Oracle Solaris - CVE-2018-2892

Link to public exploit:

Vulnerability description

The vulnerability allows a local attacker to gain elevated privileges on the target system.

The weakness exists in the Oracle Solaris AVS kernel component due to a signedness bug in the bounds checking of the ‘SDBC_TEST_INIT’ ioctlcode sent to the ‘/dev/sdbc‘ device. A local attacker can perform a special call to copyin() with a user controllable destination pointer and length, facilitate an arbitrary kernel memory overwrite, and execute arbitrary code in the context of kernel.

Successful exploitation of the vulnerability may result in system compromise.

Remediation