CVE-2009-3899

OpenSolaris snv_57-snv_94 - Denial of Service via Sockets Direct Protocol Memory Leak

Title source: llm
STIX 2.1

Description

Memory leak in the Sockets Direct Protocol (SDP) driver in Sun Solaris 10, and OpenSolaris snv_57 through snv_94, allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.

References (6)

Core 6
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1023124
Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/36904
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6563
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2009/3130
Vendor Advisory vendor-advisory x_refsource_sunalert
http://sunsolve.sun.com/search/document.do?assetkey=1-66-264730-1

Scores

EPSS 0.0180
EPSS Percentile 83.0%

Details

CWE
CWE-399
Status published
Products (38)
sun/opensolaris snv_57 (2 CPE variants)
sun/opensolaris snv_58 (2 CPE variants)
sun/opensolaris snv_59 (2 CPE variants)
sun/opensolaris snv_60 (2 CPE variants)
sun/opensolaris snv_61 (2 CPE variants)
sun/opensolaris snv_62 (2 CPE variants)
sun/opensolaris snv_63 (2 CPE variants)
sun/opensolaris snv_64 (2 CPE variants)
sun/opensolaris snv_65 (2 CPE variants)
sun/opensolaris snv_66 (2 CPE variants)
... and 28 more
Published Nov 06, 2009
Tracked Since Feb 18, 2026