CVE-2009-0346: Medium severity Sun OpenSolaris vulnerability
Published Jan 29, 2009
·Updated
The IP-in-IP packet processing implementation in the IPsec and IP stacks in the kernel in Sun Solaris 9 and 10, and OpenSolaris snv01 though snv85, allows local users to cause a denial of service (panic) via a self-encapsulated packet that lacks IPsec protection.
Affected Software
190 affected components
Sun OpenSolaris=snv_36
Sun OpenSolaris=snv_30
Sun OpenSolaris=snv_70
Sun OpenSolaris=snv_33
Sun OpenSolaris=snv_101
Sun OpenSolaris=snv_85
Sun OpenSolaris=snv_57
Sun OpenSolaris=snv_26
Sun OpenSolaris=snv_50
Sun Solaris=9
Sun OpenSolaris=snv_73
Sun OpenSolaris=snv_72
Sun OpenSolaris=snv_67
Sun OpenSolaris=snv_30
Sun OpenSolaris=snv_01
Sun Solaris=9
Sun OpenSolaris=snv_85
Sun OpenSolaris=snv_77
Sun OpenSolaris=snv_18
Sun OpenSolaris=snv_53
Sun OpenSolaris=snv_41
Sun OpenSolaris=snv_74
Sun OpenSolaris=snv_11
Sun OpenSolaris=snv_104
Sun OpenSolaris=snv_103
Sun OpenSolaris=snv_66
Sun OpenSolaris=snv_27
Sun OpenSolaris=snv_39
Sun OpenSolaris=snv_105
Sun OpenSolaris=snv_23
Sun OpenSolaris=snv_80
Sun OpenSolaris=snv_46
Sun OpenSolaris=snv_52
Sun OpenSolaris=snv_07
Sun OpenSolaris=snv_82
Sun OpenSolaris=snv_55
Sun OpenSolaris=snv_72
Sun OpenSolaris=snv_24
Sun OpenSolaris=snv_31
Sun OpenSolaris=snv_05
Sun OpenSolaris=snv_07
Sun OpenSolaris=snv_56
Sun OpenSolaris=snv_43
Sun OpenSolaris=snv_39
Sun OpenSolaris=snv_50
Sun OpenSolaris=snv_04
Sun OpenSolaris=snv_31
Sun OpenSolaris=snv_58
Sun OpenSolaris=snv_05
Sun OpenSolaris=snv_54
Sun OpenSolaris=snv_40
Sun OpenSolaris=snv_103
Sun OpenSolaris=snv_84
Sun OpenSolaris=snv_65
Sun OpenSolaris=snv_49
Sun OpenSolaris=snv_106
Sun OpenSolaris=snv_106
Sun OpenSolaris=snv_09
Sun OpenSolaris=snv_65
Sun OpenSolaris=snv_17
Sun OpenSolaris=snv_06
Sun OpenSolaris=snv_62
Sun OpenSolaris=snv_37
Sun OpenSolaris=snv_100
Sun OpenSolaris=snv_107
Sun OpenSolaris=snv_71
Sun OpenSolaris=snv_22
Sun OpenSolaris=snv_04
Sun OpenSolaris=snv_35
Sun OpenSolaris=snv_13
Sun OpenSolaris=snv_09
Sun OpenSolaris=snv_64
Sun OpenSolaris=snv_34
Sun OpenSolaris=snv_77
Sun OpenSolaris=snv_66
Sun OpenSolaris=snv_61
Sun OpenSolaris=snv_79
Sun OpenSolaris=snv_42
Sun OpenSolaris=snv_44
Sun OpenSolaris=snv_38
Sun OpenSolaris=snv_36
Sun OpenSolaris=snv_29
Sun OpenSolaris=snv_59
Sun Solaris=10
Sun OpenSolaris=snv_10
Sun OpenSolaris=snv_70
Sun OpenSolaris=snv_45
Sun OpenSolaris=snv_28
Sun OpenSolaris=snv_78
Sun OpenSolaris=snv_08
Sun OpenSolaris=snv_11
Sun OpenSolaris=snv_10
Sun OpenSolaris=snv_43
Sun OpenSolaris=snv_48
Sun OpenSolaris=snv_59
Sun OpenSolaris=snv_107
Sun OpenSolaris=snv_48
Sun OpenSolaris=snv_01
Sun OpenSolaris=snv_25
Sun OpenSolaris=snv_25
Sun OpenSolaris=snv_18
Sun OpenSolaris=snv_51
Sun OpenSolaris=snv_26
Sun OpenSolaris=snv_79
Sun OpenSolaris=snv_63
Sun OpenSolaris=snv_83
Sun OpenSolaris=snv_16
Sun OpenSolaris=snv_100
Sun OpenSolaris=snv_12
Sun OpenSolaris=snv_81
Sun OpenSolaris=snv_37
Sun OpenSolaris=snv_40
Sun OpenSolaris=snv_19
Sun OpenSolaris=snv_45
Sun OpenSolaris=snv_13
Sun OpenSolaris=snv_06
Sun OpenSolaris=snv_32
Sun OpenSolaris=snv_52
Sun OpenSolaris=snv_16
Sun OpenSolaris=snv_80
Sun OpenSolaris=snv_69
Sun OpenSolaris=snv_68
Sun OpenSolaris=snv_67
Sun OpenSolaris=snv_46
Sun OpenSolaris=snv_71
Sun OpenSolaris=snv_64
Sun OpenSolaris=snv_34
Sun OpenSolaris=snv_20
Sun OpenSolaris=snv_82
Sun OpenSolaris=snv_102
Sun OpenSolaris=snv_02
Sun OpenSolaris=snv_14
Sun OpenSolaris=snv_78
Sun OpenSolaris=snv_105
Sun OpenSolaris=snv_57
Sun OpenSolaris=snv_60
Sun OpenSolaris=snv_03
Sun OpenSolaris=snv_21
Sun OpenSolaris=snv_75
Sun OpenSolaris=snv_81
Sun OpenSolaris=snv_19
Sun OpenSolaris=snv_76
Sun OpenSolaris=snv_15
Sun OpenSolaris=snv_21
Sun OpenSolaris=snv_47
Sun OpenSolaris=snv_20
Sun OpenSolaris=snv_49
Sun OpenSolaris=snv_55
Sun OpenSolaris=snv_23
Sun OpenSolaris=snv_73
Sun OpenSolaris=snv_15
Sun OpenSolaris=snv_02
Sun OpenSolaris=snv_69
Sun OpenSolaris=snv_84
Sun OpenSolaris=snv_44
Sun OpenSolaris=snv_60
Sun OpenSolaris=snv_104
Sun OpenSolaris=snv_08
Sun OpenSolaris=snv_63
Sun OpenSolaris=snv_61
Sun OpenSolaris=snv_53
Sun OpenSolaris=snv_58
Sun OpenSolaris=snv_101
Sun OpenSolaris=snv_83
Sun OpenSolaris=snv_68
Sun OpenSolaris=snv_28
Sun OpenSolaris=snv_24
Sun OpenSolaris=snv_27
Sun OpenSolaris=snv_32
Sun OpenSolaris=snv_75
Sun OpenSolaris=snv_56
Sun OpenSolaris=snv_102
Sun OpenSolaris=snv_42
Sun OpenSolaris=snv_74
Sun OpenSolaris=snv_41
Sun OpenSolaris=snv_33
Sun Solaris=10
Sun OpenSolaris=snv_47
Sun OpenSolaris=snv_14
Sun OpenSolaris=snv_35
Sun OpenSolaris=snv_17
Sun OpenSolaris=snv_22
Sun OpenSolaris=snv_76
Sun OpenSolaris=snv_54
Sun OpenSolaris=snv_62
Sun OpenSolaris=snv_12
Sun OpenSolaris=snv_38
Sun OpenSolaris=snv_03
Sun OpenSolaris=snv_51
Sun OpenSolaris=snv_29
Remediation
Event History
Jan 29, 2009
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Data Sourced
via NVD·07:30 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-0346?
The severity of CVE-2009-0346 is considered critical due to its potential to cause denial of service by triggering a kernel panic.
2
How do I fix CVE-2009-0346?
To fix CVE-2009-0346, users should upgrade their Solaris operating system to the latest patched version provided by Sun Microsystems.
3
Who is affected by CVE-2009-0346?
CVE-2009-0346 affects local users of Sun Solaris 9 and 10, along with certain versions of OpenSolaris.
4
What type of vulnerability is CVE-2009-0346?
CVE-2009-0346 is a denial of service vulnerability related to IP-in-IP packet processing.
5
Can CVE-2009-0346 be exploited remotely?
No, CVE-2009-0346 can only be exploited by local users with access to the affected systems.