SO
Product
Solaris
450
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 2Medium 1Low 0
Watch
Add Solaris to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2009-0924 | – | Mar 17 | Unspecified vulnerability in Sun OpenSolaris snv_39 through snv_45, when running in 64-bit mode on x86 architectures, allows local users to cause a denial of service (hang of UFS… Affected: 10.0 |
| CVE-2009-0923 | – | Mar 17 | Unspecified vulnerability in Kerberos Incremental Propagation in Solaris 10 and OpenSolaris snv_01 through snv_110 allows remote attackers to cause a denial of service (loss of… Affected: 10.0 |
| CVE-2009-0913 | – | Mar 16 | Unspecified vulnerability in the keysock kernel module in Solaris 10 and OpenSolaris builds snv_01 through snv_108 allows local users to cause a denial of service (system panic)… Affected: 10; 10 |
| CVE-2009-0875 | – | Mar 12 | Race condition in the Doors subsystem in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv_94, allows local users to cause a denial of service (process hang), or… Affected: 8; 9; 10; 8; 9; 10 |
| CVE-2009-0874 | – | Mar 12 | Multiple unspecified vulnerabilities in the Doors subsystem in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv_94, allow local users to cause a denial of… Affected: 8; 9; 10; 8; 9; 10 |
| CVE-2009-0873 | – | Mar 11 | The NFS daemon (aka nfsd) in Sun Solaris 10 and OpenSolaris before snv_106, when NFSv3 is used, does not properly implement combinations of security modes, which allows remote… Affected: 10.0 |
| CVE-2009-0872 | – | Mar 11 | The NFS server in Sun Solaris 10, and OpenSolaris before snv_111, does not properly implement the AUTH_NONE (aka sec=none) security mode in combination with other security modes,… Affected: 10 |
| CVE-2009-0870 | – | Mar 10 | The NFSv4 Server module in the kernel in Sun Solaris 10, and OpenSolaris before snv_111, allow local users to cause a denial of service (infinite loop and system hang) by… Affected: 10.0; 10.0 |
| CVE-2009-0480 | – | Feb 9 | The IP implementation in Sun Solaris 8 through 10, and OpenSolaris before snv_82, uses an improper arena when allocating minor numbers for sockets, which allows local users to… Affected: 8; 8; 9; 9; 10; 10 |
| CVE-2008-6024 | – | Feb 2 | Unspecified vulnerability in the NFSv4 client module in the kernel on Sun Solaris 10 and OpenSolaris before snv_37, when automountd is used, allows user-assisted remote attackers… Affected: 10; 10 |
| CVE-2009-0346 | – | Jan 29 | The IP-in-IP packet processing implementation in the IPsec and IP stacks in the kernel in Sun Solaris 9 and 10, and OpenSolaris snv_01 though snv_85, allows local users to cause a… Affected: 9; 9; 10; 10 |
| CVE-2009-0319 | – | Jan 28 | Unspecified vulnerability in the autofs module in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv_108, allows local users to cause a denial of service (autofs… Affected: 8; 8; 9; 9; 10; 10 |
| CVE-2009-0304 | – | Jan 27 | The kernel in Sun Solaris 10 and 11 snv_101b, and OpenSolaris before snv_108, allows remote attackers to cause a denial of service (system crash) via a crafted IPv6 packet,… Affected: 10; 10 |
| CVE-2009-0268 | – | Jan 26 | Race condition in the pseudo-terminal (aka pty) driver module in Sun Solaris 8 through 10, and OpenSolaris before snv_103, allows local users to cause a denial of service (panic)… Affected: 8; 8; 9; 9; 10; 10 |
| CVE-2009-0267 | – | Jan 26 | libike in Sun Solaris 9 and 10, and OpenSolaris before snv_100, does not properly check packets, which allows remote attackers to cause a denial of service (in.iked daemon crash)… Affected: 9; 9; 10; 10 |
| CVE-2009-0168 | – | Jan 16 | Unspecified vulnerability in ppdmgr in Sun Solaris 10 and OpenSolaris snv_61 through snv_106 allows local users to cause a denial of service via unspecified vectors, related to a… Affected: 10; 10 |
| CVE-2009-0167 | – | Jan 16 | Unspecified vulnerability in lpadmin in Sun Solaris 10 and OpenSolaris snv_61 through snv_106 allows local users to cause a denial of service via unspecified vectors, related to… Affected: 10.0; 10.0 |
| CVE-2009-0132 | – | Jan 15 | Integer overflow in the aio_suspend function in Sun Solaris 8 through 10 and OpenSolaris, when 32-bit mode is enabled, allows local users to cause a denial of service (panic) via… Affected: 8; 8; 9; 9; 10; 10 |
| CVE-2009-0069 | – | Jan 7 | Unspecified vulnerability in the nfs4rename_persistent_fh function in the NFS 4 (aka NFSv4) client in the kernel in Sun Solaris 10 and OpenSolaris before snv_102 allows local… Affected: 10; 10 |
| CVE-2008-5699 | – | Dec 22 | The name service cache daemon (nscd) in Sun Solaris 10 and OpenSolaris snv_50 through snv_104 does not properly check permissions, which allows local users to gain privileges and… Affected: 10.0; 10.0 |
| CVE-2008-5690 | – | Dec 19 | The Kerberos credential renewal feature in Sun Solaris 8, 9, and 10, and OpenSolaris build snv_01 through snv_104, allows local users to cause a denial of service (authentication… Affected: 8; 8; 9; 9; 10; 10 |
| CVE-2008-5689 | – | Dec 19 | tun in IP Tunnel in Solaris 10 and OpenSolaris snv_01 through snv_76 allows local users to cause a denial of service (panic) and possibly execute arbitrary code via a crafted… Affected: 10.0; 10.0 |
| CVE-2008-5684 | – | Dec 19 | Unspecified vulnerability in the X Inter Client Exchange library (aka libICE) in Sun Solaris 8 through 10 and OpenSolaris before snv_85 allows context-dependent attackers to cause… Affected: 8; 8; 9; 9; 10; 10 |
| CVE-2008-5661 | – | Dec 17 | The IPv4 Forwarding feature in Sun Solaris 10 and OpenSolaris snv_47 through snv_82, with certain patches installed, allows remote attackers to cause a denial of service (panic)… Affected: 10; 10 |
| CVE-2008-5550 | – | Dec 12 | Open redirect vulnerability in console/faces/jsp/login/BeginLogin.jsp in Sun Java Web Console 3.0.2 through 3.0.5 and Solaris 10 allows remote attackers to redirect users to… Affected: 10; 10 |
| CVE-2008-5410 | – | Dec 10 | The PK11_SESSION cache in the OpenSSL PKCS#11 engine in Sun Solaris 10 does not maintain reference counts for operations with asymmetric keys, which allows context-dependent… Affected: 10.0; 10.0 |
| CVE-2008-5133 | – | Nov 18 | ipnat in IP Filter in Sun Solaris 10 and OpenSolaris before snv_96, when running on a DNS server with Network Address Translation (NAT) configured, improperly changes the source… Affected: 10; 10 |
| CVE-2008-5111 | – | Nov 17 | Unspecified vulnerability in the socket function in Sun Solaris 10 and OpenSolaris snv_57 through snv_91, when InfiniBand hardware is not installed, allows local users to cause a… Affected: 10; 10 |
| CVE-2008-5010 | – | Nov 10 | in.dhcpd in the DHCP implementation in Sun Solaris 8 through 10, and OpenSolaris before snv_103, allows remote attackers to cause a denial of service (assertion failure and daemon… Affected: 8; 8; 9; 9; 10; 10 |
| CVE-2008-4556 | – | Oct 14 | Stack-based buffer overflow in the adm_build_path function in sadmind in Sun Solstice AdminSuite on Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted… Affected: 8; 8; 9; 9 |
| CVE-2008-4160 | – | Sep 22 | Unspecified vulnerability in the UFS module in Sun Solaris 8 through 10 and OpenSolaris allows local users to cause a denial of service (NULL pointer dereference and kernel panic)… Affected: 8; 9; 10; 8; 9; 10 |
| CVE-2008-4131 | – | Sep 19 | Multiple unspecified vulnerabilities in Sun Solaris 8 through 10 allow local users to gain privileges via vectors related to handling of tags with (1) the -t option and (2) the… Affected: 8; 8; 9; 9; 10; 10 |
| CVE-2008-3875 | – | Sep 2 | The kernel in Sun Solaris 8 through 10 and OpenSolaris before snv_90 allows local users to bypass chroot, zones, and the Solaris Trusted Extensions multi-level security policy,… Affected: 8; 8; 9; 9; 10; 10 |
| CVE-2008-3838 | – | Aug 27 | Unspecified vulnerability in the NFS Remote Procedure Calls (RPC) zones implementation in Sun Solaris 10 and OpenSolaris before snv_88 allows local administrators of non-global… Affected: 10; 10 |
| CVE-2008-3839 | – | Aug 27 | Unspecified vulnerability in the NFS module in the kernel in Sun Solaris 10 and OpenSolaris snv_59 through snv_87, when configured as an NFS server without the nodevices option,… Affected: 10; 10 |
| CVE-2008-3666 | – | Aug 13 | Unspecified vulnerability in Sun Solaris 10 and OpenSolaris before snv_96 allows (1) context-dependent attackers to cause a denial of service (panic) via vectors involving… Affected: 10; 10 |
| CVE-2008-0964 | – | Aug 8 | Multiple stack-based buffer overflows in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o option is omitted, allow remote attackers to execute… Affected: 8; 8; 9; 9; 10; 10 |
| CVE-2008-0965 | – | Aug 8 | Multiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o option is omitted, allow remote attackers to execute… Affected: 8; 8; 9; 9; 10; 10 |
| CVE-2008-3549 | – | Aug 7 | Unspecified vulnerability in the pthread_mutex_reltimedlock_np API in Sun Solaris 10 and OpenSolaris before snv_90 allows local users to cause a denial of service (system hang or… Affected: 10; 10 |
| CVE-2008-3426 | – | Jul 31 | Unspecified vulnerability in the Solaris Platform Information and Control Library daemon (picld) in Sun Solaris 8 through 10, and OpenSolaris builds snv_01 through snv_95, allows… Affected: 8; 8; 9; 9; 10; 10 |
| CVE-2008-2946 | – | Jun 30 | The SNMP-DMI mapper subagent daemon (aka snmpXdmid) in Solstice Enterprise Agents in Sun Solaris 8 through 10 allows remote attackers to cause a denial of service (daemon crash)… Affected: 8; 9; 10 |
| CVE-2008-2710 | – | Jun 16 | Integer signedness error in the ip_set_srcfilter function in the IP Multicast Filter in uts/common/inet/ip/ip_multi.c in the kernel in Sun Solaris 10 and OpenSolaris before snv_92… Affected: through 10 |
| CVE-2008-2706 | – | Jun 16 | Unspecified vulnerability in the event port implementation in Sun Solaris 10 allows local users to cause a denial of service (panic) by submitting and retrieving user-defined… Affected: 10; 10 |
| CVE-2008-2538 | – | Jun 3 | Unspecified vulnerability in crontab on Sun Solaris 8 through 10, and OpenSolaris before snv_93, allows local users to insert cron jobs into the crontab files of arbitrary users… Affected: 8; 8; 9; 9; 10; 10 |
| CVE-2008-2418 | – | May 23 | Race condition in the STREAMS Administrative Driver (sad) in Sun Solaris 10 allows local users to cause a denial of service (panic) via unknown vectors Affected: 10; 10 |
| CVE-2008-2090 | – | May 6 | Unspecified vulnerability in the SCTP protocol implementation in Sun Solaris 10 allows remote attackers to cause a denial of service (CPU consumption and network traffic… Affected: 10; 10 |
| CVE-2008-2089 | – | May 6 | Unspecified vulnerability in the SCTP protocol implementation in Sun Solaris 10 allows remote attackers to cause a denial of service (panic) via a crafted SCTP packet Affected: 10; 10 |
| CVE-2008-1779 | – | Apr 14 | Sun Solaris 8, 9, and 10 allows "remote privileged" users to cause a denial of service (panic) via unknown vectors related to self encapsulated IP packets Affected: 8; 8; 9; 9; 10; 10 |
| CVE-2008-1780 | – | Apr 14 | Unspecified vulnerability in the labeled networking functionality in Solaris 10 Trusted Extensions allows applications in separate labeling zones to bypass labeling restrictions… Affected: 10; 10 |
| CVE-2008-1684 | – | Apr 6 | inetd on Sun Solaris 10, when debug logging is enabled, allows local users to write to arbitrary files via a symlink attack on the /var/tmp/inetd.log temporary file Affected: 10; 10 |