CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-10-21
Oracle Solaris PAM (Pluggable Authentication Module) Stack-Based Buffer Overflow Remote Code Execution (CVE-2020-14871)
[Affected Scope] Oracle Solaris 10 and Solaris 11 (prior to version 11.1)
[Impact] Unauthenticated remote attackers can exploit this vulnerability over the network to gain full root privileges and take over the system
[Mitigation] Apply the official vendor patches immediately, or disable Keyboard-Interactive authentication and PAM usage in the SSH configuration