CVE-2009-0132: Integer Overflow
Integer overflow in the aiosuspend function in Sun Solaris 8 through 10 and OpenSolaris, when 32-bit mode is enabled, allows local users to cause a denial of service (panic) via a large integer value in the second argument (aka nent argument).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable 32-bit (compatibility) mode on affected systems (Solaris 8, 9, 10, and OpenSolaris) to prevent the integer overflow in aio_suspend that can be triggered by a large nent (second) argument and cause a kernel panic.
Oracle Solaris and OpenSolaris (aio_suspend) 32-bit mode = disabled
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0132?
CVE-2009-0132 is classified as a medium-severity vulnerability that can lead to a denial of service.
How do I fix CVE-2009-0132?
To fix CVE-2009-0132, update to the latest version of Solaris provided by Oracle that addresses this vulnerability.
Who is affected by CVE-2009-0132?
CVE-2009-0132 affects local users on systems running Solaris 8, 9, or 10, and OpenSolaris in 32-bit mode.
What is the impact of exploiting CVE-2009-0132?
Exploiting CVE-2009-0132 can cause a system panic, resulting in a denial of service.
Can CVE-2009-0132 be exploited remotely?
CVE-2009-0132 cannot be exploited remotely as it requires local user access to trigger the vulnerability.