High severity · published Jan 16, 2019
CVE-2019-2541
Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: DHCP Client)
7.5
CVSS
0.9%
EPSS
No
On KEV
Description
Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: DHCP Client). The supported version that is affected is 10. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Solaris executes to compromise Oracle Solaris. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).
CVSS vector
CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Adjacent
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 60% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SO
Solaris Operating System · Oracle Corporation
10 · source: vendor
SO
Solaris · Oracle
10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-2541
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-2541
Patch
http://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
Third Party Advisory
http://www.securityfocus.com/bid/106587
More from Solaris Operating System
10.0
CVE-2020-14871
Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability
8.8
CVE-2019-3010
Oracle Solaris Privilege Escalation Vulnerability
7.5
CVE-2019-2437
Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel)
5.5
CVE-2022-39417
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem)
5.5
CVE-2022-39401
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel)