7.2

CVE-2008-3838: sun opensolaris Improper Input Validation

CVSS: 7.2v2.0HighModified
Published 27-08-2008Last modified 07-08-2024
Open JSON

Vulnerability summary

CVE-2008-3838 is a high (CVSS 7.2) Improper Input Validation vulnerability in sun opensolaris. EPSS estimates a 0.35% chance of exploitation in the next 30 days, higher than 27.2% of scored vulnerabilities.

Overall risk
29/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.2/10
010
High · v2.0 (NVD)
EPSS score
0.35%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 27-08-2008
    PublishedVulnerability first disclosed.
  2. 07-08-2024
    Last modifiedVulnerability information updated.

Description

Unspecified vulnerability in the NFS Remote Procedure Calls (RPC) zones implementation in Sun Solaris 10 and OpenSolaris before snv_88 allows local administrators of non-global zones to read and modify NFS traffic for arbitrary non-global zones, possibly leading to file modifications or a denial of service.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

0.35%

Chance of exploitation in the next 30 days

Percentile

27%

Versus all other CVEs

30-day change

0.00 pp

From 0.35% on 20-09-2026

20-09-202620-10-2026
EPSS score
0.35%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Sun2 products
  • opensolaris≤ snv_87 | snv_01 | snv_02 | snv_03 | snv_04 | snv_05 | snv_06 | snv_07 | snv_08 | snv_09 | snv_10 | snv_11 | snv_12 | snv_13 | snv_14 | snv_15 | snv_16 | snv_17 | snv_18 | snv_19 | snv_20 | snv_21 | snv_22 | snv_23 | snv_24 | snv_25 | snv_26 | snv_27 | snv_28 | snv_29 | snv_30 | snv_31 | snv_32 | snv_33 | snv_34 | snv_35 | snv_36 | snv_37 | snv_38 | snv_39 | snv_40 | snv_41 | snv_42 | snv_43 | snv_44 | snv_45 | snv_46 | snv_47 | snv_48 | snv_49 | snv_50 | snv_51 | snv_52 | snv_53 | snv_54 | snv_55 | snv_56 | snv_57 | snv_58 | snv_59 | snv_60 | snv_61 | snv_62 | snv_63 | snv_64 | snv_65 | snv_66 | snv_67 | snv_68 | snv_69 | snv_70 | snv_71 | snv_72 | snv_73 | snv_74 | snv_75 | snv_76 | snv_77 | snv_78 | snv_79 | snv_80 | snv_81 | snv_82 | snv_83 | snv_84 | snv_85 | snv_86
  • solaris10

1 vendor · 2 products

References

6 links