Lucene search

MitreCVE-2009-0838

HistoryMar 06, 2009 - 6:30 p.m.

CVE-2009-0838

2009-03-0618:30:00

CWE-399

mitre

web.nvd.nist.gov

cve-2009-0838

sun solaris

opensolaris

crypto driver

memory vulnerability

denial of service

nvd

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.5

Confidence

High

EPSS

Percentile

13.2%

JSON

The crypto pseudo device driver in Sun Solaris 10, and OpenSolaris snv_88 through snv_102, does not properly free memory, which allows local users to cause a denial of service (panic) via unspecified vectors, related to the vmem_hash_delete function.

Affected configurations

Nvd

Node

sunopensolarisMatchsnv_88

sunopensolarisMatchsnv_88sparc

sunopensolarisMatchsnv_88x86

sunopensolarisMatchsnv_89

sunopensolarisMatchsnv_89sparc

sunopensolarisMatchsnv_89x86

sunopensolarisMatchsnv_90

sunopensolarisMatchsnv_90sparc

sunopensolarisMatchsnv_90x86

sunopensolarisMatchsnv_91

sunopensolarisMatchsnv_91sparc

sunopensolarisMatchsnv_91x86

sunopensolarisMatchsnv_92

sunopensolarisMatchsnv_92sparc

sunopensolarisMatchsnv_92x86

sunopensolarisMatchsnv_93

sunopensolarisMatchsnv_93sparc

sunopensolarisMatchsnv_93x86

sunopensolarisMatchsnv_94

sunopensolarisMatchsnv_94sparc

sunopensolarisMatchsnv_94x86

sunopensolarisMatchsnv_95

sunopensolarisMatchsnv_95sparc

sunopensolarisMatchsnv_95x86

sunopensolarisMatchsnv_96sparc

sunopensolarisMatchsnv_96x86

sunopensolarisMatchsnv_97sparc

sunopensolarisMatchsnv_97x86

sunopensolarisMatchsnv_98sparc

sunopensolarisMatchsnv_98x86

sunopensolarisMatchsnv_99sparc

sunopensolarisMatchsnv_99x86

sunopensolarisMatchsnv_100sparc

sunopensolarisMatchsnv_100x86

sunopensolarisMatchsnv_101sparc

sunopensolarisMatchsnv_101x86

sunopensolarisMatchsnv_101b

sunopensolarisMatchsnv_102sparc

sunopensolarisMatchsnv_102x86

sunsunosMatch5.10

VendorProductVersionCPE
sunopensolarissnv_88cpe:2.3:o:sun:opensolaris:snv_88:*:*:*:*:*:*:*
sunopensolarissnv_88cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*
sunopensolarissnv_88cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*
sunopensolarissnv_89cpe:2.3:o:sun:opensolaris:snv_89:*:*:*:*:*:*:*
sunopensolarissnv_89cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*
sunopensolarissnv_89cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*
sunopensolarissnv_90cpe:2.3:o:sun:opensolaris:snv_90:*:*:*:*:*:*:*
sunopensolarissnv_90cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*
sunopensolarissnv_90cpe:2.3:o:sun:opensolaris:snv_90:x86:*:*:*:*:*:*
sunopensolarissnv_91cpe:2.3:o:sun:opensolaris:snv_91:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sun	opensolaris	snv_88	cpe:2.3:o:sun:opensolaris:snv_88:::::::*
sun	opensolaris	snv_88	cpe:2.3:o:sun:opensolaris:snv_88::sparc:::::
sun	opensolaris	snv_88	cpe:2.3:o:sun:opensolaris:snv_88::x86:::::
sun	opensolaris	snv_89	cpe:2.3:o:sun:opensolaris:snv_89:::::::*
sun	opensolaris	snv_89	cpe:2.3:o:sun:opensolaris:snv_89::sparc:::::
sun	opensolaris	snv_89	cpe:2.3:o:sun:opensolaris:snv_89::x86:::::
sun	opensolaris	snv_90	cpe:2.3:o:sun:opensolaris:snv_90:::::::*
sun	opensolaris	snv_90	cpe:2.3:o:sun:opensolaris:snv_90::sparc:::::
sun	opensolaris	snv_90	cpe:2.3:o:sun:opensolaris:snv_90:x86::::::
sun	opensolaris	snv_91	cpe:2.3:o:sun:opensolaris:snv_91:::::::*

Rows per page:

1-10 of 401

References

secunia.com/advisories/34149

secunia.com/advisories/34455

securitytracker.com/id?1021810

sunsolve.sun.com/search/document.do?assetkey=1-21-139498-04-1

sunsolve.sun.com/search/document.do?assetkey=1-66-254088-1

support.avaya.com/elmodocs2/security/ASA-2009-097.htm

www.securityfocus.com/bid/34000

www.vupen.com/english/advisories/2009/0606

www.vupen.com/english/advisories/2009/0815

exchange.xforce.ibmcloud.com/vulnerabilities/49105

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5641

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.5

Confidence

High

EPSS

Percentile

13.2%

JSON

Related for CVE-2009-0838