A local vulnerability in the Solaris Libraries component of Oracle Solaris 11.4 can be triggered by an unauthenticated attacker who has logged into the infrastructure where Solaris runs. The flaw allows the attacker to cause a hang or repeated crash of the OS, resulting in a complete denial of service. The weakness relates to improper error handling, as identified by the assigned CWE-404, but further detail is not provided in the advisory.

The affected product is Oracle Solaris 11.4 from Oracle Corporation. Only the 11.4 release is listed as impacted in the advisory.

The CVSS v3.1 base score is 4.7, indicating moderate severity with an availability impact. The EPSS score is < 1 %, and the vulnerability is not listed in CISA’s KEV catalog, suggesting limited known exploitation activity. The attack requires local access to the machine and human interaction from a third party, so while exploitation is not trivial, the potential for downtime makes it a concern for operational continuity.