Input validation error in Oracle Solaris - CVE-2015-4801

 

Input validation error in Oracle Solaris - CVE-2015-4801

Published: October 22, 2015 / Updated: August 9, 2020


Vulnerability identifier: #VU40635
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2015-4801
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote non-authenticated attacker to gain access to sensitive information.

Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect confidentiality via unknown vectors related to Solaris Kernel Zones.


Affected software

Oracle Solaris

How to mitigate CVE-2015-4801

Install update from vendor's website.


External References

Related Security Bulletins