CVE-2009-3937

Memory leak in Solaris TCP sockets in Sun OpenSolaris snv_106 through snv_126 allows local users to cause a denial of service (kernel memory consumption) via unspecified vectors involving tcp_sendmsg processing "ancillary data."

CVSS v2.0 4.9 MEDIUM

4.9^/10

CVSS v2.0 : MEDIUM

Vector : AV:L/AC:L/Au:N/C:N/I:N/A:C

Exploitability : 3.9 / Impact : 6.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References

Link	Resource
http://sunsolve.sun.com/search/document.do?assetkey=1-66-266488-1
http://sunsolve.sun.com/search/document.do?assetkey=1-68-nv_osol0906u5-1
http://www.securityfocus.com/bid/36992
http://www.securitytracker.com/id?1023162
http://www.vupen.com/english/advisories/2009/3213	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:sun:opensolaris:snv_106:::::::*
	cpe:2.3:o:sun:opensolaris:snv_107:::::::*
	cpe:2.3:o:sun:opensolaris:snv_108:::::::*
	cpe:2.3:o:sun:opensolaris:snv_109:::::::*
	cpe:2.3:o:sun:opensolaris:snv_110:::::::*
	cpe:2.3:o:sun:opensolaris:snv_111:::::::*
	cpe:2.3:o:sun:opensolaris:snv_112:::::::*
	cpe:2.3:o:sun:opensolaris:snv_113:::::::*
	cpe:2.3:o:sun:opensolaris:snv_114:::::::*
	cpe:2.3:o:sun:opensolaris:snv_115:::::::*
	cpe:2.3:o:sun:opensolaris:snv_116:::::::*
	cpe:2.3:o:sun:opensolaris:snv_117:::::::*
	cpe:2.3:o:sun:opensolaris:snv_118:::::::*
	cpe:2.3:o:sun:opensolaris:snv_119:::::::*
	cpe:2.3:o:sun:opensolaris:snv_120:::::::*
	cpe:2.3:o:sun:opensolaris:snv_121:::::::*
	cpe:2.3:o:sun:opensolaris:snv_122:::::::*
	cpe:2.3:o:sun:opensolaris:snv_123:::::::*
	cpe:2.3:o:sun:opensolaris:snv_124:::::::*
	cpe:2.3:o:sun:opensolaris:snv_125:::::::*
	cpe:2.3:o:sun:opensolaris:snv_126:::::::*

History

No history.

Information

Published : 2009-11-13 16:30

Updated : 2009-11-16 05:00

NVD link : CVE-2009-3937

Mitre link : CVE-2009-3937

CVE.ORG link : CVE-2009-3937

JSON object : View

Products Affected

sun

opensolaris

CWE

CWE-399

Resource Management Errors

{"id": "CVE-2009-3937", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.9, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2009-11-13T16:30:00.267", "references": [{"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266488-1", "source": "cve@mitre.org"}, {"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-68-nv_osol0906u5-1", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/36992", "source": "cve@mitre.org"}, {"url": "http://www.securitytracker.com/id?1023162", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2009/3213", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-399"}]}], "descriptions": [{"lang": "en", "value": "Memory leak in Solaris TCP sockets in Sun OpenSolaris snv_106 through snv_126 allows local users to cause a denial of service (kernel memory consumption) via unspecified vectors involving tcp_sendmsg processing \"ancillary data.\""}, {"lang": "es", "value": "Fallo de memoria en Solaris TCP sockets en Sun OpenSolaris snv_106 a snv_126 permite a usuarios locales provocar una denegaci\u00f3n de servicio (consumo de memoria del kernel) mediante vectores no especificados que involucran el procesamiento tcp_sendmsg de \"datos auxiliares\"."}], "lastModified": "2009-11-16T05:00:00.000", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sun:opensolaris:snv_106:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A843E5E4-E53E-484B-8A86-14DD2DA10943"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_107:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "81199A81-CAD2-4375-8C3B-2638D007E4FC"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_108:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B2BFC95D-3E59-4EF4-915A-14696072C8A1"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_109:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FDE86EE0-418E-4133-8F4B-03761F9EE0DF"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_110:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "866FF3B9-465E-4120-A2B8-089023BA3539"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_111:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "49D264BD-B5F4-4B50-8A93-F2D71CF8CE27"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_112:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7CF2D6FB-87CF-436D-9B45-FA83F084220D"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_113:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "542FFD48-9906-4409-8A5B-A749FED207AC"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_114:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "270BD07B-FA0D-486E-A7C7-9BACF13F0BC0"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_115:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7AC90882-18E3-4634-B76C-4B438BF703A4"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_116:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "07D0C227-0AB1-4368-B1B5-E5711CD76BAD"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_117:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9E254E8E-8174-4DB2-AE6F-99733777E684"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_118:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B1FDE7F1-5EE4-4059-962C-19578EACE613"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_119:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B37FAC5F-7C26-4326-B294-FC4EF89DFF24"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_120:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D4CC63C2-6030-4CE0-B119-9BA7F8F99112"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_121:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ED73BE2C-8657-4377-9C4F-9177F4DE3DE7"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_122:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3B0BA77C-64A0-4102-A510-8DE6C7ED119E"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_123:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "57C0E0C9-7E78-414F-B59A-979C2A1F020F"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_124:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7A840894-FD5C-457F-AB03-243C4BEC0463"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_125:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1B9D018D-64DB-44F6-A60B-5B7D07718324"}, {"criteria": "cpe:2.3:o:sun:opensolaris:snv_126:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "164765D9-8D3E-4392-911C-4A176A6E648B"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}