Input validation error in Oracle Solaris - CVE-2015-2580
Published: July 16, 2015 / Updated: August 9, 2020
Vulnerability identifier: #VU40698
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2015-2580
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote non-authenticated attacker to perform service disruption.
Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect availability via vectors related to NFSv4.
Affected software
Oracle Solaris
How to mitigate CVE-2015-2580
Install update from vendor's website.