CVE-2020-2656: oracle solaris

csirt@kutim:~/threat-intel/cve/CVE-2020-2656

CVSS 4.4 · Medium EPSS 0,56%

Kerentanan pada oracle solaris. Skor CVSS 3.1 4.4 (Medium) menurut NVD.

Deskripsi (NVD)

Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Solaris accessible data as well as unauthorized read access to a subset of Oracle Solaris accessible data. CVSS 3.0 Base Score 4.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).

Rincian

Terbit di NVD: 15 Januari 2020
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 4.4 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N · uraikan di kalkulator
EPSS (30 hari): 0,56% peluang dieksploitasi; lebih tinggi dari 45,0% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
oracle	solaris	Versi 10
oracle	solaris	Versi 11

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://www.oracle.com/security-alerts/cpujan2020.html patch · advisory vendor
http://packetstormsecurity.com/files/155990/Solaris-xlock-Information-Disclosure.html exploit · patch · advisory pihak ketiga · vdb entry
http://seclists.org/fulldisclosure/2020/Jan/23 exploit · mailing list · patch · advisory pihak ketiga
http://www.openwall.com/lists/oss-security/2020/01/20/2 mailing list · advisory pihak ketiga
https://seclists.org/bugtraq/2020/Jan/23 exploit · mailing list · advisory pihak ketiga

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.