Input validation error in Oracle Solaris - CVE-2015-0471

 

Input validation error in Oracle Solaris - CVE-2015-0471

Published: April 16, 2015 / Updated: August 9, 2020


Vulnerability identifier: #VU40821
CSH Severity: Medium
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2015-0471
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to libelfsign.


Affected software

Oracle Solaris

How to mitigate CVE-2015-0471

Install update from vendor's website.


External References

Related Security Bulletins