CVE-2017-3498: Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel).

Security readout for executives and security teams

A logged-in, low-privileged user on Solaris 11.3 could use a kernel flaw to read some data they should not access. It is local-only and affects confidentiality, not system takeover, data modification, or outages based on the CVE description. Exposure is limited to systems running Oracle Solaris 11.3 where untrusted or broad low-privileged shell access exists. Internet-facing exposure is not indicated because the attack vector is local. Treat as a low business-urgency confidentiality issue unless Solaris 11.3 hosts allow many local users. It should be handled through normal patch governance, with higher priority for shared infrastructure. Mitigation focus: Review Oracle April 2017 Critical Patch Update guidance for Solaris 11.3 remediation.; Prioritize patching Solaris 11.3 systems with shared user access or hosted workloads.; Restrict local logon access to trusted users until vendor remediation is confirmed..

Prepared

Jun 13, 2026, 05:18 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.