Analyst readout for executives and security teams
Plain-English summary
CVE-2011-3536 is a Solaris 10 availability issue tied to Oracle's DTrace Software Library, libdtrace. The public record says local users can affect system availability, but gives no technical root cause, CVSS score, or detailed affected version range beyond Solaris 10.
Executive priority
Prioritize this for legacy Solaris 10 environments supporting critical services or shared user access. It is not supported by the bundle as remotely exploitable or actively exploited, so urgency should be driven by asset criticality and exposure.
Technical view
The CVE describes an unspecified local vulnerability in Oracle Solaris 10 related to libdtrace. The documented impact is availability only. The source bundle does not establish remote reachability, privilege escalation, confidentiality impact, integrity impact, exploit code, or active exploitation.
Likely exposure
Exposure is most likely limited to organizations still operating Oracle Solaris 10 systems where untrusted or lower-trust users can run local workloads or access shells.
Exploitation context
The bundle marks this CVE as not in KEV and provides no cited evidence of active exploitation. Because the flaw requires local user access, risk depends heavily on shared-host usage, shell access, and workload isolation.
Researcher notes
Public detail is sparse: no CWE, CVSS, patch identifier, affected sub-version, or root cause is included in the bundle. Treat Oracle's advisory as the authoritative source for remediation details and avoid assuming exploit mechanics.
Mitigation direction
- Review Oracle's October 2011 Critical Patch Update for applicable Solaris 10 guidance.
- Apply vendor-recommended Solaris 10 updates where this CVE is listed.
- Limit local shell access to trusted administrators until remediation is confirmed.
- Reduce unnecessary DTrace-related access on shared Solaris 10 hosts.
- Monitor affected systems for unexplained availability degradation.
Validation and detection
- Inventory Solaris 10 systems and identify those with local multi-user access.
- Confirm whether Oracle's October 2011 CPU applies to each host.
- Check installed Solaris patch or package levels against Oracle guidance.
- Review access controls for users able to execute local workloads.
- Document unresolved hosts and compensating restrictions.
Public sources used
Based on public source material and reviewed before publication.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2011-3536 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.htmlCVE reference · x_refsource_CONFIRM
- 76471CVE reference · vdb-entry, x_refsource_OSVDB
- 50262CVE reference · vdb-entry, x_refsource_BID
- orasun-sol-libdtrace-unspecified(70809)CVE reference · vdb-entry, x_refsource_XF
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.