CVE:CVE-2021-43395
CNNVD:CNNVD-202201-1451
Oracle Solaris是美国甲骨文（Oracle）公司的一套UNIX操作系统。
Oracle Solaris 中存在访问控制错误漏洞，该漏洞源于产品的Filesystem组件未对低权限用户添加访问限制。攻击者可通过该漏洞登陆至基础设施并导致系统挂起或崩溃。以下产品及版本受到影响：Oracle Solaris 11、10。
solution:Upgrade illumos illumos to a higher version than 2022-01-18,and avoid the version (,2022-01-18); Upgrade omniosce omnios to a higher version than r151038,and avoid the version r151038; Upgrade openindiana openindiana to a higher version than hipster_2021.04,and avoid the version hipster_2021.04; Upgrade joyent smartos to a higher version than 20210923,and avoid the version 20210923; Upgrade oracle solaris to a higher version than 10,11,and avoid the version 10,11