CVE-2020-14871

Oracle Solaris and Zettabyte File System (ZFS) Unspecified

10.0 CRITICALActively exploited (CISA KEV)Public exploitEPSS 80.2%

Published21 Oct 2020
Added to CISA KEV3 Nov 2021
Remediation due3 May 2022

Description

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Pluggable authentication module). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. Note: This CVE is not exploitable for Solaris 11.1 and later releases, and ZFSSA 8.7 and later releases, thus the CVSS Base Score is 0.0. CVSS 3.1 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).

CVSS 3.1 breakdown

Attack vectorNetwork

Attack complexityLow

Privileges requiredNone

User interactionNone

ScopeChanged

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Affected products

Oracle Solaris≥ 10 < 11.1 · 9

Remediation

Fixed in

Oracle Solaris≥ 11.1

Patch & vendor advisories

References

http://packetstormsecurity.com/files/159961/SunSSH-Solaris-10-x86-Remote-Root.htmlThird Party AdvisoryVDB Entry
http://packetstormsecurity.com/files/160510/Solaris-SunSSH-11.0-x86-libpam-Remote-Root.htmlExploitThird Party AdvisoryVDB Entry
http://packetstormsecurity.com/files/160609/Oracle-Solaris-SunSSH-PAM-parse_user_name-Buffer-Overflow.htmlExploitThird Party AdvisoryVDB Entry
http://packetstormsecurity.com/files/163232/Solaris-SunSSH-11.0-Remote-Root.htmlExploitThird Party AdvisoryVDB Entry
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-14871US Government Resource
https://www.oracle.com/security-alerts/cpuoct2020.htmlVendor Advisory
http://www.openwall.com/lists/oss-security/2021/03/03/1Mailing ListThird Party Advisory
http://www.openwall.com/lists/oss-security/2024/07/03/3Mailing ListPatch

Related CVEs

Recent high-severity vulnerabilities sharing a weakness type.

Frequently asked

Is CVE-2020-14871 being actively exploited?

Yes. CVE-2020-14871 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added 3 Nov 2021.

How severe is CVE-2020-14871?

CVE-2020-14871 has a CVSS 3.1 base score of 10.0, rated critical. EPSS estimates a 80.2% probability of exploitation.

Which products are affected by CVE-2020-14871?

Affected products include Oracle Solaris.

How do I fix CVE-2020-14871?

Upgrade affected software to a fixed version, for example Oracle Solaris 11.1 or later, then confirm no affected versions remain in your inventory.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2020-14871 against the real software inventory on every managed device, as each hourly inventory arrives. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. Because it is on the CISA KEV list, a risk for it never ranks below high, and the update that fixes it moves to the Emergency patch lane. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation works Book a demo

Data from the NVD, CISA KEV catalog and FIRST EPSS. CVSS 3.1 base score shown where available.