CVE-2008-2706

Solaris 10 - Denial of Service via Event Port NULL Dereference

Title source: llm

Description

Unspecified vulnerability in the event port implementation in Sun Solaris 10 allows local users to cause a denial of service (panic) by submitting and retrieving user-defined events, probably related to a NULL dereference.

References (7)

Core 7

Core References

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5762

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/30653

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/43005

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2008/1807

Vendor Advisory vendor-advisory x_refsource_sunalert

http://sunsolve.sun.com/search/document.do?assetkey=1-26-235122-1

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/29680

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1020274

Scores

EPSS 0.0005

EPSS Percentile 17.0%

Details

CWE

CWE-399

Status published

Products (1)

sun/solaris 10 (2 CPE variants)

Published Jun 16, 2008

Tracked Since Feb 18, 2026