How severe is CVE-2024-21105?

This vulnerability has a severity rating of LOW with a CVSS score of 2 out of 10.

What type of vulnerability is CVE-2024-21105?

This is classified as CWE-190, which is a common weakness in software security.

CVE-2024-21105 - LOW Severity | CVSS 2

Vulnerability Description

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version that is affected is 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Solaris accessible data. CVSS 3.1 Base Score 2.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N).

Related Vulnerabilities

CVE-2024-1633

LOW

CVSS:2.0(Low)

During the secure boot, bl2 (the second stage of the bootloader) loops over images defined in the table “bl2_mem_params_descs”. For each image, the bl2 reads the image length and destination from the ...

CWE-1902024

CVE-2023-20507

LOW

CVSS:2.3(Low)

An integer overflow in the ASP could allow a privileged attacker to perform an out-of-bounds write, potentially resulting in loss of data integrity.

CWE-1902023

CVE-2021-20203

LOW

CVSS:3.2(Low)

An integer overflow issue was found in the vmxnet3 NIC emulator of the QEMU for versions up to v5.2.0. It may occur if a guest was to supply invalid values for rx/tx queue size or other NIC parameters...

CWE-1902021

CVE-2016-9085

LOW

CVSS:3.3(Low)

Multiple integer overflows in libwebp allows attackers to have unspecified impact via unknown vectors.

CWE-1902016

CVE-2018-13053

LOW

CVSS:3.3(Low)

The alarm_timer_nsleep function in kernel/time/alarmtimer.c in the Linux kernel through 4.17.3 has an integer overflow via a large relative timeout because ktime_add_safe is not used.

CWE-1902018

CVE-2019-19004

LOW

CVSS:3.3(Low)

A biWidth*biBitCnt integer overflow in input-bmp.c in autotrace 0.31.1 allows attackers to provide an unexpected input value to malloc via a malformed bitmap image.

CWE-1902019