CVE-2017-3631: Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel).

Security readout for executives and security teams

CVE-2017-3631 is a Solaris 11 kernel vulnerability. A low-privileged logged-in attacker could affect confidentiality, integrity, and availability of some Solaris-accessible data. This is not described as remote unauthenticated compromise, but it matters on shared Solaris systems or hosts where local accounts are broadly available. Exposure is most likely on Solaris 11 systems where users, service accounts, contractors, or compromised applications can obtain local logon to the infrastructure where Solaris executes. Treat this as a moderate-priority legacy Solaris risk. It requires local access, but public exploit references and data-impact claims justify timely remediation on shared, sensitive, or externally reachable infrastructure. Mitigation focus: Inventory Solaris 11 hosts and prioritize shared or multi-user systems.; Check Oracle’s advisory and support channels for the applicable Solaris fix.; Restrict local logon to required administrators and service accounts..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.