CVE-2017-3629: Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel).

Security readout for executives and security teams

CVE-2017-3629 is a Solaris kernel vulnerability that can let a low-privileged logged-in user take over the Solaris system. The business risk is highest where Solaris 10 or 11 hosts support shared accounts, shell access, jump hosts, or application users that can execute locally. Exposure is limited to Solaris 10 and 11 systems where an attacker can obtain low-privileged local logon access. The bundle does not identify other Oracle products, remote unauthenticated exposure, or non-Solaris affected platforms. Handle as a high-priority legacy infrastructure risk. It is not shown as actively exploited in the bundle, but successful exploitation can produce full Solaris takeover after local access is gained. Mitigation focus: Review Oracle's CVE-2017-3629 advisory and apply vendor-recommended Solaris updates.; Prioritize Solaris 10 and 11 systems with shell, jump-host, or shared-user access.; Restrict low-privileged logons to Solaris hosts until remediation is confirmed..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.