PT-2009-3434 · Sun · Sun Solaris+1

Publicado 2009-03-06 · Atualizado 2018-10-30 · CVE-2009-0838

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Sun Solaris versions 10 OpenSolaris versions snv 88 through snv 102

Description The issue is related to the crypto pseudo device driver, which does not properly free memory. This can be exploited by local users to cause a denial of service, resulting in a system panic. The problem is associated with the vmem hash delete function.

Recommendations For Sun Solaris version 10, update to a version that properly frees memory in the crypto pseudo device driver. For OpenSolaris versions snv 88 through snv 102, update to a version that properly frees memory in the crypto pseudo device driver. As a temporary workaround, consider restricting access to the crypto pseudo device driver to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2009-0838

Produtos afetados

Opensolaris

Sun Solaris

Referências · 12

• http://secunia.com/advisories/34149 · Aviso do Fabricante
• http://vupen.com/english/advisories/2009/0606 · Aviso do Fabricante
• http://vupen.com/english/advisories/2009/0815 · Nota
• http://securitytracker.com/id?1021810 · Nota
• http://support.avaya.com/elmodocs2/security/ASA-2009-097.htm · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-0838 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49105 · Nota
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-254088-1 · Aviso do Fabricante
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-139498-04-1 · Aviso do Fabricante
• http://secunia.com/advisories/34455 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5641 · Nota
• http://securityfocus.com/bid/34000 · Nota