CVE-2008-5009: Race Condition
First published: Mon Nov 10 2008(Updated: )
Race condition in the s_xout kernel module in Sun Solstice X.25 9.2, when running on a multiple CPU machine, allows local users to cause a denial of service (panic) via vectors involving reading the /dev/xty file.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sun Solstice X.25 | =9.2-unknown | |
| Sun Solstice X.25 | =9.2-unknown | |
| Sun SunOS | =5.8 | |
| Sun SunOS | =5.9 | |
| Sun SunOS | =5.10 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-243106-1
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-108670-21-1
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-108669-21-1
- http://securitytracker.com/id?1021156
- http://secunia.com/advisories/32667
- http://www.securityfocus.com/bid/32215
- http://www.vupen.com/english/advisories/2008/3087
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46466
Frequently Asked Questions
What is the severity of CVE-2008-5009?
CVE-2008-5009 has a severity rating that indicates it can lead to denial of service due to a race condition.
How does CVE-2008-5009 affect system performance?
CVE-2008-5009 can cause a system panic, leading to temporary unavailability of the affected systems.
Which versions of Sun Solstice X.25 are affected by CVE-2008-5009?
CVE-2008-5009 affects Sun Solstice X.25 version 9.2 on multi-CPU machines.
Can CVE-2008-5009 be exploited remotely?
CVE-2008-5009 requires local access to exploit, making remote exploitation unlikely.
What steps can be taken to mitigate CVE-2008-5009?
Mitigation for CVE-2008-5009 involves avoiding the use of the s_xout kernel module in environments using multiple CPUs.
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- agent/remedy
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/weakness
- agent/author
- agent/tags
- agent/event
- agent/first-publish-date
- agent/description
- agent/source
- vendor/sun
- canonical/sun solstice x.25
- version/sun solstice x.25/9.2-unknown
- canonical/sun sunos
- version/sun sunos/5.8
- version/sun sunos/5.9
- version/sun sunos/5.10