CVE-2010-0453

The ucodeioctl function in intel/io/ucodedrv.c in Sun Solaris 10 and OpenSolaris snv69 through snv133, when running on x86 architectures, allows local users to cause a denial of service panic via a request with a 0 size value to the UCODEGETVERSION IOCTL, which triggers a NULL pointer dereference...

CVE-2010-0453

CVE-2010-0453 affects Sun Solaris 10/OpenSolaris (snv_69–snv_133) on x86, where the ucode_ioctl function in intel/io/ucode_drv.c is vulnerable. A 0-size UCODE_GET_VERSION IOCTL request can trigger a NULL pointer dereference in ucode_get_rev, causing a kernel panic/denial of service. The issue is ...

CVE-2010-0453: Improper Input Validation

The ucodeioctl function in intel/io/ucodedrv.c in Sun Solaris 10 and OpenSolaris snv69 through snv133, when running on x86 architectures, allows local users to cause a denial of service panic via a request with a 0 size value to the UCODEGETVERSION IOCTL, which triggers a NULL pointer dereference...

[TKADV2010-001] Oracle Solaris UCODE_GET_VERSION IOCTL Kernel NULL Pointer Dereference

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: Oracle Solaris UCODEGETVERSION IOCTL Kernel NULL Pointer Dereference Advisory ID: TKADV2010-001 Revision: 1.0 Release Date: 2010/01/31 Last Modified: 2010/01/31 Date Reported: 2009/11/29 Author: Tobias Klein tk at trapkit.de Affected Softwar...

CVE-2010-0271

hald in Sun OpenSolaris snv51 through snv130 does not have the procaudit privilege during unspecified attempts to write to the auditing log, which makes it easier for physically proximate attackers to avoid detection of changes to the set of connected hardware devices supporting the Hardware...

Design/Logic Flaw

hald in Sun OpenSolaris snv51 through snv130 does not have the procaudit privilege during unspecified attempts to write to the auditing log, which makes it easier for physically proximate attackers to avoid detection of changes to the set of connected hardware devices supporting the Hardware...

CVE-2010-0271

Affected software : Sun OpenSolaris hald (SNV_51 to SNV_130). Vulnerability details : The hald process does not have the proc_audit privilege during unspecified attempts to write to the auditing log, enabling an attacker in physical proximity to evade detection of changes to the set of Hardware A...

CVE-2010-0271

hald in Sun OpenSolaris snv51 through snv130 does not have the procaudit privilege during unspecified attempts to write to the auditing log, which makes it easier for physically proximate attackers to avoid detection of changes to the set of connected hardware devices supporting the Hardware...

CVE-2010-0271: Undefined Security Weakness

hald in Sun OpenSolaris snv51 through snv130 does not have the procaudit privilege during unspecified attempts to write to the auditing log, which makes it easier for physically proximate attackers to avoid detection of changes to the set of connected hardware devices supporting the Hardware...

CVE-2009-4226

Race condition in the IP module in the kernel in Sun OpenSolaris snv106 through snv124 allows remote attackers to cause a denial of service NULL pointer dereference and panic via unspecified vectors related to the 1 tcpdogetsockname or 2 tcpdogetpeername function...

Race condition

Race condition in the IP module in the kernel in Sun OpenSolaris snv106 through snv124 allows remote attackers to cause a denial of service NULL pointer dereference and panic via unspecified vectors related to the 1 tcpdogetsockname or 2 tcpdogetpeername function...

CVE-2009-4226

Race condition in the IP module in the kernel in Sun OpenSolaris snv106 through snv124 allows remote attackers to cause a denial of service NULL pointer dereference and panic via unspecified vectors related to the 1 tcpdogetsockname or 2 tcpdogetpeername function...

CVE-2009-4226

The CVE-2009-4226 entry concerns a race condition in the IP kernel module of Sun OpenSolaris (SNV_106 to SNV_124). The vulnerability can allow remote attackers to trigger a denial of service via NULL pointer dereference and panics, specifically through the tcp_do_getsockname or tcp_do_getpeername...

CVE-2009-4226: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the IP module in the kernel in Sun OpenSolaris snv106 through snv124 allows remote attackers to cause a denial of service NULL pointer dereference and panic via unspecified vectors related to the 1 tcpdogetsockname or 2 tcpdogetpeername function...

CVE-2009-4190

Unspecified vulnerability in the kernel in Sun OpenSolaris 2009.06 allows remote attackers to cause a denial of service panic via unknown vectors, as demonstrated by the vdsolaris2 module in VulnDisco Pack Professional 8.12. NOTE: as of 20091203, this disclosure has no actionable information...

Design/Logic Flaw

Unspecified vulnerability in the kernel in Sun OpenSolaris 2009.06 allows remote attackers to cause a denial of service panic via unknown vectors, as demonstrated by the vdsolaris2 module in VulnDisco Pack Professional 8.12. NOTE: as of 20091203, this disclosure has no actionable information...

Design/Logic Flaw

Unspecified vulnerability in the kernel in Sun Solaris 10 and OpenSolaris 2009.06 on the x86-64 platform allows local users to gain privileges via unknown vectors, as demonstrated by the vdsollocal module in VulnDisco Pack Professional 8.12. NOTE: as of 20091203, this disclosure has no actionable...

CVE-2009-4190

Unspecified vulnerability in the kernel in Sun OpenSolaris 2009.06 allows remote attackers to cause a denial of service panic via unknown vectors, as demonstrated by the vdsolaris2 module in VulnDisco Pack Professional 8.12. NOTE: as of 20091203, this disclosure has no actionable information...

CVE-2009-4191

Unspecified vulnerability in the kernel in Sun Solaris 10 and OpenSolaris 2009.06 on the x86-64 platform allows local users to gain privileges via unknown vectors, as demonstrated by the vdsollocal module in VulnDisco Pack Professional 8.12. NOTE: as of 20091203, this disclosure has no actionable...

CVE-2009-4190

CVE-2009-4190 is described as an unspecified kernel vulnerability in Sun OpenSolaris 2009.06 that can be exploited remotely to cause a denial of service (panic) via unknown vectors, as demonstrated by the vd_solaris2 module in VulnDisco Pack Professional 8.12. The connected Red Hat and CVE listin...