CVEvulnerability
CVE-2018-1171
7.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-03-19
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.0 HIGH — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-787
Description
This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064301Z. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the DTrace DOF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated object. An attacker can leverage this vulnerability to execute code under the context of the host OS. Was ZDI-CAN-5106.
Affected configurations
• joyent smartos 20170803-20170803t064301z
• oracle solaris 10
• oracle solaris 11.3
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html Patch, Third Party Advisory
- http://www.securityfocus.com/bid/104799 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1041303 Third Party Advisory, VDB Entry
- https://help.joyent.com/hc/en-us/articles/360000608188 Vendor Advisory
- https://zerodayinitiative.com/advisories/ZDI-18-236 Third Party Advisory, VDB Entry
- http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html Patch, Third Party Advisory
- http://www.securityfocus.com/bid/104799 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1041303 Third Party Advisory, VDB Entry
- https://help.joyent.com/hc/en-us/articles/360000608188 Vendor Advisory
- https://zerodayinitiative.com/advisories/ZDI-18-236 Third Party Advisory, VDB Entry