PT-2009-5811 · Sun · Sun Solaris+1

Published 2009-10-01 · Updated 2021-11-15 · CVE-2009-3519

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Sun Solaris versions 8 through 10 OpenSolaris versions prior to snv 109

Description The issue is related to multiple memory leaks in the IP module in the kernel, which can be exploited by local users to cause a denial of service through memory consumption. This can be achieved via vectors related to M DATA, M PROTO, M PCPROTO, and M SIG STREAMS messages.

Recommendations For Sun Solaris versions 8 through 10, update to a version outside of the affected range to resolve the issue. For OpenSolaris versions prior to snv 109, update to a version snv 109 or later to resolve the issue. As a temporary workaround, consider restricting access to the IP module in the kernel to minimize the risk of exploitation.

Fix

Missing Release of Resource after Effective Lifetime

Weakness Enumeration

CWE-772

Related Identifiers

CVE-2009-3519

Affected Products

Opensolaris

Sun Solaris

References · 4

• http://sunsolve.sun.com/search/document.do?assetkey=1-66-263388-1 · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-122300-44-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-3519 · Security Note
• http://securityfocus.com/bid/36562 · Note