A vulnerability exists in the Services component of Oracle Solaris 11.4 that allows an unauthenticated attacker with local access to cause a hang or crash, resulting in a denial of service. The CVE description does not specify the root cause, but the impact is availability disruption. Based on the description, it is inferred that the weakness may involve uncontrolled resource consumption, which would affect availability but not confidentiality or integrity.

Affected products are Oracle Solaris version 11.4. No other versions or build numbers are listed in the advisory, and the vulnerability is not known to affect earlier releases.

The CVSS base score is 5.1, indicating moderate risk. Because the EPSS score is < 1 % and the vulnerability is not listed in the CISA KEV catalog, the likelihood of mass exploitation appears low. However, any entity that runs the affected system and permits local access can potentially trigger repeated crashes, disrupting critical services. Remote exploitation is unlikely without a local foothold.