VRT 391,810 CVEs tracked · 15,472 in RASP scope · data as of 57 minutes ago

CVE-2018-2808

5.0 Medium Not applicable

Description

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Solaris. CVSS 3.0 Base Score 5.0 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H).

Exploitation Status

No public exploit

Nothing published shows this CVE being exploited, which is not the same as ruling it out. nothing published in 8 years.

CVSS E:U

  • CISA KEV not listed
  • CISA Vulnrichment exploitation: none
  • Indexed PoC none indexed
  • EPSS 0.46% chance in 30 days

Waratek Defense Posture

Not applicable

Not a Java vulnerability. Outside ARMR's domain entirely.

  • Protection none
  • Action not-needed none
  • Review automated upstream-data
  • Record active
Decided by unmatched-product : No tracked product matched above, and none present at all
Finding Affected product (oracle/solaris) is not in our known products list

CVSS

5.0 MEDIUM v3.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H 2 metrics

VRT selects the newest version's highest entry and publishes it as cvssScore, newest rather than largest because scores are not comparable across versions, and highest rather than first because the first entry is frequently a CNA placeholder scoring 0.0 over NVD's own analysis.

VersionScoreBandVectorAssignerType
CVSS 3.0 5.0 MEDIUM CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H NVD Primary published
CVSS 2.0 4.7 no band published AV:L/AC:M/Au:N/C:N/I:N/A:C NVD Primary

Affected Software & Releases

🏛️ Oracle CPU Advisories & Products

AdvisoryTypeQuarterProducts Oracle named in risk matrix
Oracle Critical Patch Update April 2018 ↗ CPU 2018-Q2 Oracle Sun Systems Products Suite / Kernel (11.3)

Indexed Oracle Components & Versions

FamilyComponentOracle's version cell (verbatim)Indexed as
Oracle Sun Systems Products Suite Kernel 11.3 11.3

🖥️ Product CPEs & Version Ranges

1 product(s) over 1 version claims (uncapped)
SourceVendorProductSchemeAffected Versions
nvd oracle solaris generic 11.3

References

URLTags
http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html Patch, Vendor Advisory
http://www.securityfocus.com/bid/103881 Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1040702 Third Party Advisory, VDB Entry

Timeline

Published 2018-04-19 Last modified 2026-06-17
Published2018-04-19By the CVE Program.
NVD record modified2026-06-17NVD's own last-modified date for this record.