Input validation error in Oracle Solaris - CVE-2011-3536

 

Input validation error in Oracle Solaris - CVE-2011-3536

Published: October 19, 2011 / Updated: August 11, 2020


Vulnerability identifier: #VU44591
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2011-3536
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote non-authenticated attacker to perform service disruption.

Unspecified vulnerability in Oracle Solaris 10 allows local users to affect availability, related to DTrace Software Library (libdtrace).


Affected software

Oracle Solaris

How to mitigate CVE-2011-3536

Install update from vendor's website.


External References

Related Security Bulletins