CVE-2017-3474: Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Zone).

Security readout for executives and security teams

CVE-2017-3474 is a Solaris 11.3 Zone vulnerability. A logged-in, low-privileged local user could gain unauthorized read access to some Solaris-accessible data. The business risk is limited by the local access requirement and confidentiality-only impact, but shared Solaris environments should still treat it as actionable hygiene. Exposure is most likely on Oracle Solaris 11.3 systems, especially hosts using Zones or allowing multiple local users to log on. Systems not running Solaris 11.3 are not identified as affected in the provided sources. Handle through normal vulnerability remediation, with higher priority for shared Solaris infrastructure or regulated data environments. This is not presented as remotely exploitable or actively exploited in the supplied evidence. Mitigation focus: Check Oracle April 2017 CPU guidance for applicable Solaris 11.3 updates.; Inventory Solaris 11.3 hosts and prioritize shared or multi-user systems.; Restrict local shell and administrative access to trusted users only..

Prepared

Jun 13, 2026, 05:18 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.