PT-2009-6153 · Sun · Opensolaris

Publicado 2009-11-13 · Atualizado 2009-11-16 · CVE-2009-3937

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Sun OpenSolaris versions snv 106 through snv 126

Description The issue is related to a memory leak in Solaris TCP sockets, which can be exploited by local users to cause a denial of service. This is achieved through unspecified vectors involving tcp sendmsg processing of "ancillary data."

Recommendations For Sun OpenSolaris versions snv 106 through snv 126, consider restricting access to tcp sendmsg processing to minimize the risk of exploitation until a patch is available.

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2009-3937

Produtos afetados

Opensolaris

Referências · 6

• http://securityfocus.com/bid/36992 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-3937 · Nota de Segurança
• http://vupen.com/english/advisories/2009/3213 · Aviso do Fabricante
• http://sunsolve.sun.com/search/document.do?assetkey=1-68-nv_osol0906u5-1 · Nota
• http://securitytracker.com/id?1023162 · Nota
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-266488-1 · Aviso do Fabricante