CVE-2017-3564: Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: RBAC).

Security readout for executives and security teams

CVE-2017-3564 is a high-impact Oracle Solaris 11.3 RBAC flaw. A logged-in, low-privileged attacker could compromise Solaris if another person interacts with the attack. Oracle’s record says successful exploitation can result in Solaris takeover and may affect additional products running on or relying on Solaris. Exposure is most likely where Oracle Solaris 11.3 hosts remain in service, especially systems allowing local user logon. The source bundle does not identify other affected versions or specific dependent products, so do not broaden scope without vendor confirmation. Treat this as high priority for any remaining Solaris 11.3 estate. The business risk is full host compromise from a local foothold, with possible downstream impact to products depending on that Solaris system. Prioritize patch verification and access reduction over broad emergency response unless exploitation evidence emerges. Mitigation focus: Review Oracle’s April 2017 Critical Patch Update guidance for Solaris 11.3.; Apply Oracle-approved Solaris updates or mitigations if listed by the vendor.; Restrict local logon access to Solaris hosts to necessary users only..

Prepared

Jun 13, 2026, 05:18 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.