CVE-2009-0838

The crypto pseudo device driver in Sun Solaris 10, and OpenSolaris snv_88 through snv_102, does not properly free memory, which allows local users to cause a denial of service (panic) via unspecified vectors, related to the vmem_hash_delete function.

CVSS v2.0 4.9 MEDIUM

4.9^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:L/AC:L/Au:N/C:N/I:N/A:C

Exploitability : 3.9 / Impact : 6.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References

Link	Resource
http://secunia.com/advisories/34149	Vendor Advisory
http://secunia.com/advisories/34455
http://securitytracker.com/id?1021810
http://sunsolve.sun.com/search/document.do?assetkey=1-21-139498-04-1	Patch Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-66-254088-1	Patch Vendor Advisory
http://support.avaya.com/elmodocs2/security/ASA-2009-097.htm
http://www.securityfocus.com/bid/34000
http://www.vupen.com/english/advisories/2009/0606	Vendor Advisory
http://www.vupen.com/english/advisories/2009/0815
https://exchange.xforce.ibmcloud.com/vulnerabilities/49105
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5641
http://secunia.com/advisories/34149	Vendor Advisory
http://secunia.com/advisories/34455
http://securitytracker.com/id?1021810
http://sunsolve.sun.com/search/document.do?assetkey=1-21-139498-04-1	Patch Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-66-254088-1	Patch Vendor Advisory
http://support.avaya.com/elmodocs2/security/ASA-2009-097.htm
http://www.securityfocus.com/bid/34000
http://www.vupen.com/english/advisories/2009/0606	Vendor Advisory
http://www.vupen.com/english/advisories/2009/0815
https://exchange.xforce.ibmcloud.com/vulnerabilities/49105
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5641

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:sun:opensolaris:snv_88:::::::*
	cpe:2.3:o:sun:opensolaris:snv_88::sparc:::::
	cpe:2.3:o:sun:opensolaris:snv_88::x86:::::
	cpe:2.3:o:sun:opensolaris:snv_89:::::::*
	cpe:2.3:o:sun:opensolaris:snv_89::sparc:::::
	cpe:2.3:o:sun:opensolaris:snv_89::x86:::::
	cpe:2.3:o:sun:opensolaris:snv_90:::::::*
	cpe:2.3:o:sun:opensolaris:snv_90::sparc:::::
	cpe:2.3:o:sun:opensolaris:snv_90:x86::::::
	cpe:2.3:o:sun:opensolaris:snv_91:::::::*
	cpe:2.3:o:sun:opensolaris:snv_91::sparc:::::
	cpe:2.3:o:sun:opensolaris:snv_91::x86:::::
	cpe:2.3:o:sun:opensolaris:snv_92:::::::*
	cpe:2.3:o:sun:opensolaris:snv_92::sparc:::::
	cpe:2.3:o:sun:opensolaris:snv_92::x86:::::
	cpe:2.3:o:sun:opensolaris:snv_93:::::::*
	cpe:2.3:o:sun:opensolaris:snv_93::sparc:::::
	cpe:2.3:o:sun:opensolaris:snv_93::x86:::::
	cpe:2.3:o:sun:opensolaris:snv_94:::::::*
	cpe:2.3:o:sun:opensolaris:snv_94::sparc:::::
	cpe:2.3:o:sun:opensolaris:snv_94::x86:::::
	cpe:2.3:o:sun:opensolaris:snv_95:::::::*
	cpe:2.3:o:sun:opensolaris:snv_95::sparc:::::
	cpe:2.3:o:sun:opensolaris:snv_95::x86:::::
	cpe:2.3:o:sun:opensolaris:snv_96::sparc:::::
	cpe:2.3:o:sun:opensolaris:snv_96::x86:::::
	cpe:2.3:o:sun:opensolaris:snv_97::sparc:::::
	cpe:2.3:o:sun:opensolaris:snv_97::x86:::::
	cpe:2.3:o:sun:opensolaris:snv_98::sparc:::::
	cpe:2.3:o:sun:opensolaris:snv_98::x86:::::
	cpe:2.3:o:sun:opensolaris:snv_99::sparc:::::
	cpe:2.3:o:sun:opensolaris:snv_99::x86:::::
	cpe:2.3:o:sun:opensolaris:snv_100::sparc:::::
	cpe:2.3:o:sun:opensolaris:snv_100::x86:::::
	cpe:2.3:o:sun:opensolaris:snv_101::sparc:::::
	cpe:2.3:o:sun:opensolaris:snv_101::x86:::::
	cpe:2.3:o:sun:opensolaris:snv_101b:::::::*
	cpe:2.3:o:sun:opensolaris:snv_102::sparc:::::
	cpe:2.3:o:sun:opensolaris:snv_102::x86:::::
	cpe:2.3:o:sun:sunos:5.10:::::::*

History

21 Nov 2024, 01:01

Type	Values Removed	Values Added
References	~~() http://secunia.com/advisories/34149 - Vendor Advisory~~	() http://secunia.com/advisories/34149 - Vendor Advisory
References	~~() http://secunia.com/advisories/34455 -~~	() http://secunia.com/advisories/34455 -
References	~~() http://securitytracker.com/id?1021810 -~~	() http://securitytracker.com/id?1021810 -
References	~~() http://sunsolve.sun.com/search/document.do?assetkey=1-21-139498-04-1 - Patch, Vendor Advisory~~	() http://sunsolve.sun.com/search/document.do?assetkey=1-21-139498-04-1 - Patch, Vendor Advisory
References	~~() http://sunsolve.sun.com/search/document.do?assetkey=1-66-254088-1 - Patch, Vendor Advisory~~	() http://sunsolve.sun.com/search/document.do?assetkey=1-66-254088-1 - Patch, Vendor Advisory
References	~~() http://support.avaya.com/elmodocs2/security/ASA-2009-097.htm -~~	() http://support.avaya.com/elmodocs2/security/ASA-2009-097.htm -
References	~~() http://www.securityfocus.com/bid/34000 -~~	() http://www.securityfocus.com/bid/34000 -
References	~~() http://www.vupen.com/english/advisories/2009/0606 - Vendor Advisory~~	() http://www.vupen.com/english/advisories/2009/0606 - Vendor Advisory
References	~~() http://www.vupen.com/english/advisories/2009/0815 -~~	() http://www.vupen.com/english/advisories/2009/0815 -
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/49105 -~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/49105 -
References	~~() https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5641 -~~	() https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5641 -

Information

Published : 2009-03-06 18:30

Updated : 2024-11-21 01:01

NVD link : CVE-2009-0838

Mitre link : CVE-2009-0838

CVE.ORG link : CVE-2009-0838

JSON object : View

Products Affected

sun

sunos
opensolaris

CWE

CWE-399

Resource Management Errors

{"id": "CVE-2009-0838", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.9, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2009-03-06T18:30:00.717", "references": [{"url": "http://secunia.com/advisories/34149", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/34455", "source": "cve@mitre.org"}, {"url": "http://securitytracker.com/id?1021810", "source": "cve@mitre.org"}, {"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-139498-04-1", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-254088-1", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://support.avaya.com/elmodocs2/security/ASA-2009-097.htm", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/34000", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2009/0606", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2009/0815", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49105", "source": "cve@mitre.org"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5641", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/34149", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/34455", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://securitytracker.com/id?1021810", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-139498-04-1", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-254088-1", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://support.avaya.com/elmodocs2/security/ASA-2009-097.htm", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/34000", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2009/0606", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2009/0815", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49105", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5641", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-399"}]}], "descriptions": [{"lang": "en", "value": "The crypto pseudo device driver in Sun Solaris 10, and OpenSolaris snv_88 through snv_102, does not properly free memory, which allows local users to cause a denial of service (panic) via unspecified vectors, related to the vmem_hash_delete function."}, {"lang": "es", "value": "El controlador crypto pseudo en Sun Solaris v10, y OpenSolaris snv_88 hasta snv_102, no libera memoria adecuadamente, lo cual permite a usuarios locales provocar una denegaci\u00f3n de servicio (p\u00e1nico) a trav\u00e9s de vectores no especificados, relacionado con la funci\u00f3n vmem_hash_delete."}], "lastModified": "2024-11-21T01:01:01.557", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sun:opensolaris:snv_88:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E5F33FE6-B2A7-4D20-8425-C545139103A7"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "460EE9E9-27BA-4C8B-9F06-BBA648105720"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4126C6C9-90AB-470E-AF83-4ED1FDD90511"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_89:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "287C4B1B-FFA8-452E-98BF-8B2EB30F6B6C"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3275E47F-5A4B-4843-A07C-82DEE852672C"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_90:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F666F65E-BFA9-4F06-A84F-844D7E5DEBBC"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CD673F9F-442E-4997-A0E3-D4B595D16B3E"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_90:x86:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FB134C5D-D0FF-436C-8304-5CED1EC54A7E"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_91:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7B36C324-ADFA-4885-846E-059872C95B25"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0BEADEEA-4D63-4E69-BFEE-02205150F909"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6692EE63-A76B-47C3-BC0D-7C15CA6FE013"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_92:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FB88D92E-A71C-4EA7-8A30-0109E62E9F26"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "54DA5312-D935-444E-8154-514C5BD6E3F9"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BA1E27E5-FE20-42FA-9A61-A7174E705EB3"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_93:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CD8801EA-A577-4388-83F7-174F168B66E3"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "65A32803-580D-4D07-B39B-2159258CBA8B"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_94:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FFF21371-BC95-4815-AE8D-34361B5FA3B5"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FF6EFE12-51AD-4879-9529-B7EA425059C5"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "13B51612-3BD6-449F-AD63-D01F8D05B269"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_95:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E5C02D1A-F957-44AD-B7D0-ECF59695C6AF"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4B2E7E54-2268-4C54-9363-C2D363D3A447"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7A54DEC9-4F04-4E0A-B253-8822F114DCC0"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "447E9E9E-5B19-4261-8B70-F63EAE61DB95"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "51AB0746-66E6-4FF5-9CB2-42E29A01C961"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2B4A015E-802F-4440-AF10-683B5E0586B9"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D1A9DCF7-F469-4D77-966F-3721F377D80B"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "04D12F3A-4C47-4B49-B3DE-484C1EE466E0"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3D028821-CA38-48C4-9324-222526AC8413"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5BE8232A-2464-449A-A7B6-D44447AA9080"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1F2CB558-9390-4AAE-A66D-E3DA537E3115"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_101b:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "86931B59-DAD2-474B-B030-3B1389278C49"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6061C499-21A8-4EC4-B5AD-F6E876B15C48"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "411B33D1-F55D-42C0-9046-040ABC42E31B"}, {"criteria": "cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E75493D0-F060-4CBA-8AB0-C4FE8B2A8C9B"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}

4.9 /10