Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2009-3937

Memory leak in Solaris TCP sockets in Sun OpenSolaris snv_106 through snv_126 allows local users to cause a denial of service (kernel memory consumption) via unspecified vectors involving tcp_sendmsg processing "ancillary data."

Published

2009-11-13T16:30:00.267

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 4.9 (MEDIUM)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: COMPLETE
Exploitability Score

3.9

Impact Score

6.9

Weaknesses
  • Type: Primary
    CWE-399
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System sun opensolaris snv_106 Yes
Operating System sun opensolaris snv_107 Yes
Operating System sun opensolaris snv_108 Yes
Operating System sun opensolaris snv_109 Yes
Operating System sun opensolaris snv_110 Yes
Operating System sun opensolaris snv_111 Yes
Operating System sun opensolaris snv_112 Yes
Operating System sun opensolaris snv_113 Yes
Operating System sun opensolaris snv_114 Yes
Operating System sun opensolaris snv_115 Yes
Operating System sun opensolaris snv_116 Yes
Operating System sun opensolaris snv_117 Yes
Operating System sun opensolaris snv_118 Yes
Operating System sun opensolaris snv_119 Yes
Operating System sun opensolaris snv_120 Yes
Operating System sun opensolaris snv_121 Yes
Operating System sun opensolaris snv_122 Yes
Operating System sun opensolaris snv_123 Yes
Operating System sun opensolaris snv_124 Yes
Operating System sun opensolaris snv_125 Yes
Operating System sun opensolaris snv_126 Yes
References