CVE-2009-0132

2009-01-1517:30:00

CWE-189

[email protected]

web.nvd.nist.gov

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.3

Confidence

High

EPSS

Percentile

13.2%

JSON

Integer overflow in the aio_suspend function in Sun Solaris 8 through 10 and OpenSolaris, when 32-bit mode is enabled, allows local users to cause a denial of service (panic) via a large integer value in the second argument (aka nent argument).

Affected configurations

Nvd

Node

sunopensolarissparc

sunopensolarisx86

sunsolarisMatch8sparc

sunsolarisMatch8x86

sunsolarisMatch9sparc

sunsolarisMatch9x86

sunsolarisMatch10sparc

sunsolarisMatch10x86

VendorProductVersionCPE
sunopensolaris*cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*
sunopensolaris*cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*
sunsolaris8cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*
sunsolaris8cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*
sunsolaris9cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*
sunsolaris9cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*
sunsolaris10cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*
sunsolaris10cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*

Vendor	Product	Version	CPE
sun	opensolaris	*	cpe:2.3:o:sun:opensolaris:::sparc:::::*
sun	opensolaris	*	cpe:2.3:o:sun:opensolaris:::x86:::::*
sun	solaris	8	cpe:2.3:o:sun:solaris:8::sparc:::::
sun	solaris	8	cpe:2.3:o:sun:solaris:8::x86:::::
sun	solaris	9	cpe:2.3:o:sun:solaris:9::sparc:::::
sun	solaris	9	cpe:2.3:o:sun:solaris:9::x86:::::
sun	solaris	10	cpe:2.3:o:sun:solaris:10::sparc:::::
sun	solaris	10	cpe:2.3:o:sun:solaris:10::x86:::::