Input validation error in Oracle Solaris - CVE-2015-2578

 

Input validation error in Oracle Solaris - CVE-2015-2578

Published: April 16, 2015 / Updated: August 9, 2020


Vulnerability identifier: #VU40817
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2015-2578
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

Unspecified vulnerability in Oracle Sun Solaris 11.2 allows remote attackers to affect availability via vectors related to Kernel IDMap.


Affected software

Oracle Solaris

How to mitigate CVE-2015-2578

Install update from vendor's website.


External References

Related Security Bulletins