Sun Sunos vulnerabilities
537 known vulnerabilities affecting sun/sunos.
Total CVEs
537
CISA KEV
0
Public exploits
105
Exploited in wild
6
Severity breakdown
CRITICAL51HIGH177MEDIUM218LOW91
Vulnerabilities
Page 20 of 27
CVE-2012-5095P4MEDIUMCVSS 4.4v5.102012-10-17
CVE-2012-5095 [MEDIUM] CVE-2012-5095: Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect confidentiality, int
Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to inetd.
nvd
CVE-2014-4284P4MEDIUMCVSS 4.4v5.112014-10-15
CVE-2014-4284 [MEDIUM] CVE-2014-4284: Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, int
Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, integrity, and availability via vectors related to IPS transfer module, a different vulnerability than CVE-2014-4280.
nvd
CVE-2012-1750P4MEDIUMCVSS 4.4v5.8v5.9+2 more2012-07-17
CVE-2012-1750 [MEDIUM] CVE-2012-1750: Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect confid
Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to mailx.
nvd
CVE-2012-4292P4LOWCVSS 3.3v5.112012-08-16
CVE-2012-4292 [LOW] CWE-20 CVE-2012-4292: The dissect_stun_message function in epan/dissectors/packet-stun.c in the STUN dissector in Wireshar
The dissect_stun_message function in epan/dissectors/packet-stun.c in the STUN dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 does not properly interact with key-destruction behavior in a certain tree library, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
nvd
CVE-1999-0010P4MEDIUMCVSS 5.0v5.3v5.4+3 more1998-04-08
CVE-1999-0010 [MEDIUM] CVE-1999-0010: Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages.
Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages.
nvd
CVE-2004-1180P4MEDIUMCVSS 5.0v5.92004-02-16
CVE-2004-1180 [MEDIUM] CVE-2004-1180: Unknown vulnerability in the rwho daemon (rwhod) before 0.17, on little endian architectures, allows
Unknown vulnerability in the rwho daemon (rwhod) before 0.17, on little endian architectures, allows remote attackers to cause a denial of service (application crash).
nvd
CVE-1999-0019P4MEDIUMCVSS 5.0v4.1.3v4.1.4+3 more1996-04-24
CVE-1999-0019 [MEDIUM] CVE-1999-0019: Delete or create a file via rpc.statd, due to invalid information.
Delete or create a file via rpc.statd, due to invalid information.
nvd
CVE-1999-0211P4MEDIUMCVSS 5.0v4.1.1v4.1.2+3 more1994-02-14
CVE-1999-0211 [MEDIUM] CVE-1999-0211: Extra long export lists over 256 characters in some mount daemons allows NFS directories to be mount
Extra long export lists over 256 characters in some mount daemons allows NFS directories to be mounted by anyone.
nvd
CVE-2000-0030P4MEDIUMCVSS 5.0v5.71999-12-22
CVE-2000-0030 [MEDIUM] CVE-2000-0030: Solaris dmispd dmi_cmd allows local users to fill up restricted disk space by adding files to the /v
Solaris dmispd dmi_cmd allows local users to fill up restricted disk space by adding files to the /var/dmi/db database.
nvd
CVE-2013-5862P4MEDIUMCVSS 4.9v5.102013-10-16
CVE-2013-5862 [MEDIUM] CVE-2013-5862: Unspecified vulnerability in Oracle Solaris 10 and 11.1 allows local users to affect availability vi
Unspecified vulnerability in Oracle Solaris 10 and 11.1 allows local users to affect availability via vectors related to CPU performance counters (CPC) drivers, a different vulnerability than CVE-2014-4215.
nvd
CVE-2013-5876P4MEDIUMCVSS 4.9v5.102014-01-15
CVE-2013-5876 [MEDIUM] CVE-2013-5876: Unspecified vulnerability in Oracle Solaris 10 and 11.1 allows local users to affect availability vi
Unspecified vulnerability in Oracle Solaris 10 and 11.1 allows local users to affect availability via unknown vectors related to Kernel, a different vulnerability than CVE-2014-0447.
nvd
CVE-2014-4224P4MEDIUMCVSS 4.9v5.8v5.9+1 more2014-07-17
CVE-2014-4224 [MEDIUM] CVE-2014-4224: Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11.1 allows local users to affect avai
Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11.1 allows local users to affect availability via unknown vectors related to sockfs.
nvd
CVE-2012-3207P4MEDIUMCVSS 4.9v5.9v5.10+1 more2012-10-17
CVE-2012-3207 [MEDIUM] CVE-2012-3207: Unspecified vulnerability in Oracle Sun Solaris 9, 10, and 11 allows local users to affect availabil
Unspecified vulnerability in Oracle Sun Solaris 9, 10, and 11 allows local users to affect availability via unknown vectors related to Kernel.
nvd
CVE-2014-4215P4MEDIUMCVSS 4.9v5.102014-07-17
CVE-2014-4215 [MEDIUM] CVE-2014-4215: Unspecified vulnerability in Oracle Solaris 10 and 11.1 allows local users to affect availability vi
Unspecified vulnerability in Oracle Solaris 10 and 11.1 allows local users to affect availability via vectors related to CPU performance counters (CPC) drivers, a different vulnerability than CVE-2013-5862.
nvd
CVE-2012-1692P4MEDIUMCVSS 4.9v5.102012-05-03
CVE-2012-1692 [MEDIUM] CVE-2012-1692: Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect availability, relate
Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect availability, related to SCTP.
nvd
CVE-2009-0838P4MEDIUMCVSS 4.9v5.102009-03-06
CVE-2009-0838 [MEDIUM] CWE-399 CVE-2009-0838: The crypto pseudo device driver in Sun Solaris 10, and OpenSolaris snv_88 through snv_102, does not
The crypto pseudo device driver in Sun Solaris 10, and OpenSolaris snv_88 through snv_102, does not properly free memory, which allows local users to cause a denial of service (panic) via unspecified vectors, related to the vmem_hash_delete function.
nvd
CVE-2014-6497P4MEDIUMCVSS 4.9v5.112014-10-15
CVE-2014-6497 [MEDIUM] CVE-2014-6497: Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unk
Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unknown vectors related to Kernel.
nvd
CVE-2012-1681P4MEDIUMCVSS 4.9v5.8v5.9+2 more2012-05-03
CVE-2012-1681 [MEDIUM] CVE-2012-1681: Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect availa
Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect availability via unknown vectors related to Kernel/sockfs.
nvd
CVE-2011-3542P4MEDIUMCVSS 4.9v5.10v5.112011-10-18
CVE-2011-3542 [MEDIUM] CVE-2011-3542: Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows local users to affect availabil
Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows local users to affect availability via unknown vectors related to Kernel/Performance Counter BackEnd Module (pcbe).
nvd
CVE-2015-0428P4MEDIUMCVSS 4.9v5.10v5.112015-01-21
CVE-2015-0428 [MEDIUM] CVE-2015-0428: Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect availability
Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect availability via unknown vectors related to Resource Control.
nvd