Oracle Solaris 11.4 is vulnerable to a local denial‑of‑service attack that can cause the system to hang or crash repeatedly. An attacker who can log on to the affected infrastructure can exploit a flaw in the Services component to make the OS unstable, affecting only availability while confidentiality and integrity remain untouched. The weakness appears to be an improper handling of conditions that trigger a crash, as reflected in the CVSS vector of AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H.

The vulnerability impacts Oracle Corporation’s Oracle Solaris operating system, version 11.4. No other versions or products are currently listed as affected.

The CVSS 3.1 base score of 4.7 indicates a moderate severity focused solely on availability. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting limited public exploitation data. Attacks require local logon and low privilege, but once exploited the attacker can cause the Solaris system to hang or crash, potentially disrupting services hosted on the machine. Given the low attack complexity and privileged minimal requirements, the risk to environments where Solaris 11.4 runs remains significant for any host that accepts local login credentials.