CVE-2007-6180: sun solaris Race Condition

Modified

Published 30-11-2007Last modified 07-08-2024

Vulnerability summary

CVE-2007-6180 is a high (CVSS 7.6) Race Condition vulnerability in sun solaris. EPSS estimates a 0.67% chance of exploitation in the next 30 days, higher than 51.3% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk

41/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.6/10

010

High · v2.0 (NVD)

EPSS score

0.67%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits1reference

Timeline

30-11-2007
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Race condition in the Remote Procedure Call kernel module (rpcmod) in Sun Solaris 8 through 10 allows local users to cause a denial of service (NULL dereference and panic) via unspecified vectors.

CVSS metrics

1 score · 1 source · 1 version

v2.07.6

EPSS trend

Probability

0.67%

Chance of exploitation in the next 30 days

Percentile

51%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.67% on 22-09-2026

22-09-202622-10-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

1 found

referenceUnverified
Exploit Reference (sunsolve.sun.com)
Maturity: unknown

Weaknesses

CWE · root cause

CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

Affected systems

Sun1 product

solaris8.0 | 9.0 | 10.0

1 vendor · 1 product

References

10 links

exchange.xforce.ibmcloud.com/vulnerabilities/38718VDB EntryX Refsource XF
www.securityfocus.com/bid/26627VDB EntryX Refsource BID
www.vupen.com/english/advisories/2007/4035VDB EntryX Refsource VUPEN
sunsolve.sun.com/search/document.do?assetkey=1-66-200661-1Vendor AdvisoryX Refsource SUNALERT
www.securitytracker.com/id?1019011VDB EntryX Refsource SECTRACK
secunia.com/advisories/28057Third Party AdvisoryX Refsource SECUNIA
support.avaya.com/elmodocs2/security/ASA-2007-508.htmX Refsource CONFIRM
osvdb.org/40821VDB EntryX Refsource OSVDB
secunia.com/advisories/27831Third Party AdvisoryX Refsource SECUNIA
sunsolve.sun.com/search/document.do?assetkey=1-26-103083-1Vendor AdvisoryX Refsource SUNALERTExploitPatch