PT-2009-6153 · Sun · Opensolaris

Published 2009-11-13 · Updated 2009-11-16 · CVE-2009-3937

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Sun OpenSolaris versions snv 106 through snv 126

Description The issue is related to a memory leak in Solaris TCP sockets, which can be exploited by local users to cause a denial of service. This is achieved through unspecified vectors involving tcp sendmsg processing of "ancillary data."

Recommendations For Sun OpenSolaris versions snv 106 through snv 126, consider restricting access to tcp sendmsg processing to minimize the risk of exploitation until a patch is available.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2009-3937

Affected Products

Opensolaris

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2009-3937 · Security Note
• http://vupen.com/english/advisories/2009/3213 · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-266488-1 · Vendor Advisory
• http://securityfocus.com/bid/36992 · Note
• http://sunsolve.sun.com/search/document.do?assetkey=1-68-nv_osol0906u5-1 · Note
• http://securitytracker.com/id?1023162 · Note