CVE-2009-2297

OpenSolaris snv_90-snv_108 - Denial of Service via UDP Subsystem crgetlabel Function

Title source: llm
STIX 2.1

Description

Unspecified vulnerability in the udp subsystem in the kernel in Sun Solaris 10, and OpenSolaris snv_90 through snv_108, when Solaris Trusted Extensions is enabled, allows remote attackers to cause a denial of service (panic) via unspecified vectors involving the crgetlabel function, related to a "TX panic." NOTE: this issue exists because of a regression in earlier kernel patches.

References (3)

Core 3
Core References
Patch, Vendor Advisory vendor-advisory x_refsource_sunalert
http://sunsolve.sun.com/search/document.do?assetkey=1-66-262048-1
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/35579

Scores

EPSS 0.0076
EPSS Percentile 73.5%

Details

Status published
Products (20)
sun/opensolaris snv_90 (2 CPE variants)
sun/opensolaris snv_91 (2 CPE variants)
sun/opensolaris snv_92 (2 CPE variants)
sun/opensolaris snv_93 (2 CPE variants)
sun/opensolaris snv_94 (2 CPE variants)
sun/opensolaris snv_95 (2 CPE variants)
sun/opensolaris snv_96 (2 CPE variants)
sun/opensolaris snv_97 (2 CPE variants)
sun/opensolaris snv_98 (2 CPE variants)
sun/opensolaris snv_99 (2 CPE variants)
... and 10 more
Published Jul 02, 2009
Tracked Since Feb 18, 2026