Privilege escalation in Oracle Solaris - CVE-2019-2541

Vulnerability identifier: #VU17058

CSH Severity: Low

CVSS v4: 7.7 [CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2019-2541

CWE-ID: CWE-264

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

The vulnerability allows an adjacent attacker to gain elevated privileges.

The weakness exists due to unspecified flaw in DHCP Client. An adjacent attacker can gain elevated privileges to conduct further attacks.

Oracle Solaris

Install update from vendor's website.

• https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html#AppendixEM

• Multiple vulnerabilities in Oracle Sun Systems Products Suite
• Multiple vulnerabilities in Oracle Solaris