CVE-2016-5551

CWE-284 — Improper Access ControlCWE-287 — Improper Authentication8 documents6 sources
Severity
2.8LOW
EPSS
0.1%
top 64.71%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Oracle Corporation Solaris ClusterOracle Solaris Cluster
Timeline
PublishedApr 24
Latest updateMay 17

Description

Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite (subcomponent: NAS device addition). The supported version that is affected is 4.3. Easily "exploitable" vulnerability allows unauthenticated attacker with logon to the infrastructure where Solaris Cluster executes to compromise Solaris Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a s…

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:NExploitability: 1.3 | Impact: 1.4

Affected Packages2 packages

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

4
GHSA
GHSA-hg5g-79f4-qv6q: Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite (subcomponent: NAS device addition)↗2022-05-17
▶
CVEList
CVE-2016-5551: Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite (subcomponent: NAS device addition)↗2017-04-24
▶
OSV
linux, linux-aws, linux-gke, linux-raspi2, linux-snapdragon vulnerabilities↗2017-03-15
▶
OSV
linux-lts-xenial vulnerabilities↗2017-03-15
▶

📋Vendor Advisories

1
Red Hat
kernel: S_ISGD is not cleared when setting posix ACLs in tmpfs (CVE-2016-7097 incomplete fix)↗2017-01-09
▶

💬Community

1
Bugzilla
CVE-2017-5551 kernel: S_ISGD is not cleared when setting posix ACLs in tmpfs (CVE-2016-7097 incomplete fix)↗2017-01-24
▶
CVE-2016-5551 (LOW CVSS 2.8) | Vulnerability in the Solaris Cluste | cvebase.io