Input validation error in Oracle Solaris - CVE-2015-2609
Published: July 16, 2015 / Updated: August 9, 2020
Vulnerability identifier: #VU40695
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2015-2609
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.
Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect availability via vectors related to CPU performance counters drivers.
Affected software
Oracle Solaris
How to mitigate CVE-2015-2609
Install update from vendor's website.