BaseFortify

Publication date: 2025-10-21

Last updated on: 2025-10-24

Assigner: Oracle

Description

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Solaris. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-21

Last Modified

2025-10-24

Generated

2026-07-06

AI Q&A

2025-10-21

EPSS Evaluated

2026-07-05

NVD

CVE-2025-53068

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	solaris	11

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-400	The product does not properly control the allocation and maintenance of a limited resource.

Attack-Flow Graph

Executive Summary

This vulnerability exists in the Oracle Solaris Kernel component, specifically in version 11. It allows a low privileged attacker who has logon access to the system to exploit the vulnerability and compromise Oracle Solaris. The attack can cause the system to hang or repeatedly crash, resulting in a complete denial of service (DoS).

Impact Analysis

The vulnerability can lead to a complete denial of service (DoS) on Oracle Solaris systems, causing the system to hang or crash repeatedly. This can disrupt availability and potentially impact other products that rely on Oracle Solaris due to the scope change.

Hi! I’m here to help you understand CVE-2025-53068. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70