CVE-2008-5009: Race Condition
Published Nov 10, 2008
·Updated
Race condition in the sxout kernel module in Sun Solstice X.25 9.2, when running on a multiple CPU machine, allows local users to cause a denial of service (panic) via vectors involving reading the /dev/xty file.
Affected Software
5 affected components
Sun Solstice X.25=9.2-unknown
Sun Solstice X.25=9.2-unknown
Sun SunOS=5.8
Sun SunOS=5.9
Sun SunOS=5.10
Remediation
Event History
Nov 10, 2008
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Data Sourced
03:23 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2008-5009?
CVE-2008-5009 has a severity rating that indicates it can lead to denial of service due to a race condition.
2
How does CVE-2008-5009 affect system performance?
CVE-2008-5009 can cause a system panic, leading to temporary unavailability of the affected systems.
3
Which versions of Sun Solstice X.25 are affected by CVE-2008-5009?
CVE-2008-5009 affects Sun Solstice X.25 version 9.2 on multi-CPU machines.
4
Can CVE-2008-5009 be exploited remotely?
CVE-2008-5009 requires local access to exploit, making remote exploitation unlikely.
5
What steps can be taken to mitigate CVE-2008-5009?
Mitigation for CVE-2008-5009 involves avoiding the use of the s_xout kernel module in environments using multiple CPUs.