CVE Feed

    Dashboard / CVE / CVE-2020-2571

    CVE-2020-2571

    Vulnerability in the Oracle VM Server for SPARC product of Oracle Systems (component: Templates). The supported version that is affected is 3.6. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM Server for SPARC executes to compromise Oracle VM Server for SPARC. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle VM Server for SPARC accessible data. CVSS 3.0 Base Score 3.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).

    Published:Jan 15, 2020
    Last Modified:Nov 21, 2024
    EPS:Jan 15, 2020
    EPSS Score:0.00339
    CVSS Score:3.3

    Affected Products

    Vendor
    Oracle
    Product
    Vm Server

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2023-22024 (CVSS 5.5) — In the Unbreakable Enterprise Kernel (UEK), the RDS module in UEK has two setsockopt(2) options, RDS_CONN_RESE…
    CVE-2017-3242 (CVSS 5.9) — Vulnerability in the Oracle VM Server for Sparc component of Oracle Sun Systems Products Suite (subcomponent: …
    CVE-2016-7039 (CVSS 7.5) — The IP stack in the Linux kernel through 4.8.2 allows remote attackers to cause a denial of service (stack con…
    CVE-2016-2776 (CVSS 7.5) — buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not…
    CVE-2016-5403 (CVSS 5.5) — The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to cause a denia…
    CVE-2016-5696 (CVSS 4.8) — net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segm…
    CVE-2016-6198 (CVSS 5.5) — The filesystem layer in the Linux kernel before 4.5.5 proceeds with post-rename operations after an OverlayFS …
    CVE-2016-6197 (CVSS 5.5) — fs/overlayfs/dir.c in the OverlayFS filesystem implementation in the Linux kernel before 4.6 does not properly…
    CVE-2016-4470 (CVSS 5.5) — The key_reject_and_link function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that…
    CVE-2016-4962 (CVSS 6.7) — The libxl device-handling in Xen 4.6.x and earlier allows local OS guest administrators to cause a denial of s…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High