Lucene search

K
cve[email protected]CVE-2009-3101
HistoryOct 03, 2022 - 4:23 p.m.

CVE-2009-3101

2022-10-0316:23:56
CWE-399
web.nvd.nist.gov
20
xscreensaver
solaris
opensolaris
denial of service
cpu consumption
console hang
nvd
cve-2009-3101

4.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.4%

xscreensaver (aka Gnome-XScreenSaver) in Sun Solaris 10, and OpenSolaris snv_109 through snv_122, does not properly handle Trusted Extensions, which allows local users to cause a denial of service (CPU consumption and console hang) by locking the screen, related to a regression in certain Solaris and OpenSolaris patches.

Affected configurations

NVD
Node
sunopensolarisMatchsnv_109sparc
OR
sunopensolarisMatchsnv_110sparc
OR
sunopensolarisMatchsnv_111sparc
OR
sunopensolarisMatchsnv_112sparc
OR
sunopensolarisMatchsnv_113sparc
OR
sunopensolarisMatchsnv_114sparc
OR
sunopensolarisMatchsnv_115sparc
OR
sunopensolarisMatchsnv_116sparc
OR
sunopensolarisMatchsnv_117sparc
OR
sunopensolarisMatchsnv_118sparc
OR
sunopensolarisMatchsnv_119sparc
OR
sunopensolarisMatchsnv_120sparc
OR
sunopensolarisMatchsnv_121sparc
OR
sunopensolarisMatchsnv_122sparc
OR
sunsolarisMatch9sparc
OR
sunsolarisMatch10sparc
AND
sunopensolarisMatchsnv_100x86
OR
sunopensolarisMatchsnv_101x86
OR
sunopensolarisMatchsnv_102x86
OR
sunopensolarisMatchsnv_103x86
OR
sunopensolarisMatchsnv_104x86
OR
sunopensolarisMatchsnv_105x86
OR
sunopensolarisMatchsnv_106x86
OR
sunopensolarisMatchsnv_107x86
OR
sunopensolarisMatchsnv_108x86
OR
sunopensolarisMatchsnv_109x86
OR
sunopensolarisMatchsnv_110x86
OR
sunopensolarisMatchsnv_111x86
OR
sunopensolarisMatchsnv_112x86
OR
sunopensolarisMatchsnv_113x86
OR
sunopensolarisMatchsnv_114x86
OR
sunopensolarisMatchsnv_115x86
OR
sunopensolarisMatchsnv_116x86
OR
sunopensolarisMatchsnv_117x86
OR
sunopensolarisMatchsnv_118x86
OR
sunopensolarisMatchsnv_119x86
OR
sunopensolarisMatchsnv_120x86
OR
sunopensolarisMatchsnv_121x86
OR
sunopensolarisMatchsnv_122x86
OR
sunsolarisMatch9x86
OR
sunsolarisMatch10x86

4.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.4%