Opensolaris
Vendor:
First CVE: Oct 11, 2007 · Active for 18 years
115
Total CVEs
More Total CVEs than 99% of tracked products
19.2
Avg CVEs / Year
Higher CVE frequency than 98% of tracked products
6.0
Avg CVSS
Higher Avg CVSS than 21% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Opensolaris over time
Volume of CVEsAvg CVSS Base Score
First CVE
Oct 11, 2007
18 years ago
Most Recent CVE
Apr 6, 2016
3,761 days ago
CVE Severity & Scoring
Opensolaris115 CVEs
54%
37%
All CVEs352,231 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local0 (0.0%)
Network16 (13.9%)
Unknown99 (86.1%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low15 (13.0%)
High1 (0.9%)
Unknown99 (86.1%)
User Interaction
None12 (10.4%)
Unknown99 (86.1%)
Required4 (3.5%)
Privileges Required
Low2 (1.7%)
High0 (0.0%)
None14 (12.2%)
Unknown99 (86.1%)
Top CVEs
Signals from CVEs in this product scope (115 CVEs).
115 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2007-5365HIGH Stack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD 4.0 through 4.2, and some other dhcpd implementations based on ISC dhcp-2, allows remote a | Oct 11, 2007 | 7.2 | 71 | NO | YES |
CVE-2008-0964HIGH Multiple stack-based buffer overflows in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o option is omitted, allow remote attackers to execute arbitrary | Aug 8, 2008 | 9.3 | 39 | NO | YES |
CVE-2008-5010HIGH in.dhcpd in the DHCP implementation in Sun Solaris 8 through 10, and OpenSolaris before snv_103, allows remote attackers to cause a denial of service (assertion failure and daemon | Nov 10, 2008 | 10.0 | 36 | NO | YES |
CVE-2009-0304HIGH The kernel in Sun Solaris 10 and 11 snv_101b, and OpenSolaris before snv_108, allows remote attackers to cause a denial of service (system crash) via a crafted IPv6 packet, related | Jan 27, 2009 | 7.8 | 33 | NO | YES |
CVE-2008-5689HIGH tun in IP Tunnel in Solaris 10 and OpenSolaris snv_01 through snv_76 allows local users to cause a denial of service (panic) and possibly execute arbitrary code via a crafted SIOCG | Dec 19, 2008 | 7.2 | 32 | NO | YES |
CVE-2015-6319CRITICAL SQL injection vulnerability in the web-based management interface on Cisco RV220W devices allows remote attackers to execute arbitrary SQL commands via a crafted header in an HTTP | Jan 27, 2016 | 9.8 | 30 | NO | NO |
CVE-2009-3692HIGH Unspecified vulnerability in the VBoxNetAdpCtl configuration tool in Sun VirtualBox 3.0.x before 3.0.8 on Solaris x86, Linux, and Mac OS X allows local users to gain privileges via | Oct 13, 2009 | 7.2 | 29 | NO | YES |
CVE-2016-1329CRITICAL Cisco NX-OS 6.0(2)U6(1) through 6.0(2)U6(5) on Nexus 3000 devices and 6.0(2)A6(1) through 6.0(2)A6(5) and 6.0(2)A7(1) on Nexus 3500 devices has hardcoded credentials, which allows | Mar 3, 2016 | 9.8 | 27 | NO | NO |
CVE-2009-2296HIGH The NFSv4 server kernel module in Sun Solaris 10, and OpenSolaris before snv_119, does not properly implement the nfs_portmon setting, which allows remote attackers to access share | Jul 2, 2009 | 10.0 | 27 | NO | NO |
CVE-2016-1291CRITICAL Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allow remote attackers to execute arbitrary code via crafted deserialized | Apr 6, 2016 | 9.8 | 26 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (115 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
8 CVEs
7.0% of CVEs· 88th percentile
Social Chatter
Signals from CVEs in this product scope (115 CVEs).
Media Mentions
Signals from CVEs in this product scope (115 CVEs).
Top CNAs Publishing CVEs For Opensolaris
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| snv_99 | 47 | 5.7 | 3.1% | 0 | 5 |
| snv_98 | 47 | 5.7 | 3.1% | 0 | 5 |
| snv_97 | 46 | 5.7 | 3.1% | 0 | 5 |
| snv_96 | 47 | 5.7 | 3.1% | 0 | 5 |
| snv_95 | 46 | 5.5 | 2.9% | 0 | 5 |
| snv_94 | 50 | 5.8 | 2.9% | 0 | 5 |
| snv_93 | 51 | 5.7 | 2.9% | 0 | 5 |
| snv_92 | 53 | 5.8 | 2.8% | 0 | 5 |
| snv_91 | 56 | 5.7 | 2.7% | 0 | 5 |
| snv_90 | 55 | 5.6 | 2.7% | 0 | 5 |
| snv_89 | 55 | 5.6 | 2.7% | 0 | 5 |
| snv_88 | 55 | 5.6 | 2.7% | 0 | 5 |
| snv_87 | 54 | 5.7 | 2.8% | 0 | 5 |
| snv_86 | 56 | 5.7 | 2.7% | 0 | 5 |
| snv_85 | 59 | 5.7 | 2.6% | 0 | 5 |
| snv_84 | 57 | 5.7 | 2.7% | 0 | 5 |
| snv_83 | 57 | 5.8 | 2.7% | 0 | 5 |
| snv_82 | 60 | 5.8 | 2.6% | 0 | 5 |
| snv_81 | 60 | 5.8 | 2.6% | 0 | 5 |
| snv_80 | 61 | 5.8 | 2.6% | 0 | 5 |