CVE-2017-10036: Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: NFSv4).

Security readout for executives and security teams

CVE-2017-10036 is a remotely reachable denial-of-service issue in Solaris NFSv4. An unauthenticated network attacker could make affected Solaris 10 or 11 systems hang or crash repeatedly, disrupting services hosted on those machines. The cited record identifies availability impact only, not data theft or integrity compromise. Exposure is most likely where Solaris 10 or 11 systems run NFSv4 reachable from untrusted or broad internal networks. Systems not using NFSv4, or with NFSv4 tightly filtered, have lower practical exposure based on the cited attack vector. Treat as high priority for legacy or mission-critical Solaris environments using NFSv4. The impact is service outage rather than data compromise, but unauthenticated network reachability and repeatable denial of service justify prompt patch verification and exposure reduction. Mitigation focus: Review Oracle July 2017 CPU guidance for Solaris fixes.; Apply relevant Solaris security updates from Oracle support channels.; Restrict NFSv4 exposure to trusted networks and required clients..

Prepared

Jun 12, 2026, 21:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.