CVE-2009-2137

Memory leak in the Ultra-SPARC T2 crypto provider device driver aka n2cp in Sun Solaris 10, and OpenSolaris snv54 through snv112, allows context-dependent attackers to cause a denial of service memory consumption via unspecified vectors related to a large keylen value...

Sun Solaris加密驱动本地拒绝服务漏洞

BUGTRAQ ID: 34000 CVECAN ID: CVE-2009-0838 Solaris是一款由Sun开发和维护的商业UNIX操作系统。 Solaris的加密伪设备驱动没有正确地释放内存，本地攻击者可以通过vmemhashdelete函数导致系统忙碌。如果出现上述漏洞，系统可能出现类似于以下栈追踪的忙碌： vmemhashdelete: bad free vmemhashdelete vmemxfree objectgetattributevalue fopioctl ioctl Sun Solaris 10.0x86 Sun Solaris 10.0 Sun...

CVE-2009-0838

The crypto pseudo device driver in Sun Solaris 10, and OpenSolaris snv88 through snv102, does not properly free memory, which allows local users to cause a denial of service panic via unspecified vectors, related to the vmemhashdelete function...

CVE-2009-0838

The CVE-2009-0838 issue affects Sun Solaris 10 and OpenSolaris builds snv_88 through snv_102, where the crypto pseudo device driver fails to free memory. This can enable local attackers to trigger a denial-of-service (panic) via the vmem_hash_delete path. Public details in connected records confi...

CVE-2009-0130

lib/crypto/csrc/cryptodrv.c in erlang does not properly check the return value from the OpenSSL DSAdoverify function, which might allow remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077. NOTE: a package...

DEBIAN-CVE-2009-0130

lib/crypto/csrc/cryptodrv.c in erlang does not properly check the return value from the OpenSSL DSAdoverify function, which might allow remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077. NOTE: a package...