CVE-2017-3623

CRITICAL

Oracle Sun Systems Products Suite Solaris Kernel RPC Vulnerability

Title source: VulnCheck
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2017-3623 has a selected CVSS score of 10.0 (critical); EIP currently links 1 catalogued exploit.

Description

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel RPC). For supported versions that are affected see note. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Solaris. While the vulnerability is in Solaris, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Solaris. Note: CVE-2017-3623 is assigned for "Ebbisland". Solaris 10 systems which have had any Kernel patch installed after, or updated via patching tools since 2012-01-26 are not impacted. Also, any Solaris 10 system installed with Solaris 10 1/13 (Solaris 10 Update 11) are not vulnerable. Solaris 11 is not impacted by this issue. CVSS 3.0 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Jun 20, 2017 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Catalogued exploits
1

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Oct 4, 2024 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

Solaris

Browse Oracle / Solaris
VulnCheckVersion data not supplied

Solaris Operating System

Browse Oracle Corporation / Solaris Operating System
CVE ListNoneaffected

Proofs of concept

1

Catalogued exploits

ExploitDBEBBISLAND EBBSHAVE 6100-09-04-1441 - Remote Buffer OverflowExploitDB exploitby hantwisterNot analyzed1 file
ExploitDB
PoC details

References

5