CVE-2009-0870: Medium severity Sun OpenSolaris vulnerability
Published Mar 10, 2009
·Updated
The NFSv4 Server module in the kernel in Sun Solaris 10, and OpenSolaris before snv111, allow local users to cause a denial of service (infinite loop and system hang) by accessing an hsfs filesystem that is shared through NFSv4, related to the rfs4opreaddir function.
Affected Software
202 affected components
Sun OpenSolaris=snv_33
Sun OpenSolaris=snv_101
Sun OpenSolaris=snv_57
Sun OpenSolaris=snv_73
Sun OpenSolaris=snv_30
Sun OpenSolaris=snv_74
Sun OpenSolaris=snv_104
Sun OpenSolaris=snv_103
Sun OpenSolaris=snv_27
Sun OpenSolaris=snv_105
Sun OpenSolaris=snv_46
Sun OpenSolaris=snv_52
Sun OpenSolaris=snv_82
Sun OpenSolaris=snv_05
Sun OpenSolaris=snv_07
Sun OpenSolaris=snv_56
Sun OpenSolaris=snv_43
Sun OpenSolaris=snv_39
Sun OpenSolaris=snv_50
Sun OpenSolaris=snv_93
Sun OpenSolaris=snv_31
Sun OpenSolaris=snv_54
Sun OpenSolaris=snv_40
Sun OpenSolaris=snv_49
Sun OpenSolaris=snv_106
Sun OpenSolaris=snv_09
Sun OpenSolaris=snv_06
Sun OpenSolaris=snv_37
Sun OpenSolaris=snv_107
Sun OpenSolaris=snv_22
Sun OpenSolaris=snv_04
Sun OpenSolaris=snv_13
Sun OpenSolaris=snv_77
Sun OpenSolaris=snv_61
Sun OpenSolaris=snv_79
Sun OpenSolaris=snv_42
Sun OpenSolaris=snv_38
Sun OpenSolaris=snv_36
Sun Solaris=10.0
Sun OpenSolaris=snv_45
Sun OpenSolaris=snv_28
Sun OpenSolaris=snv_08
Sun OpenSolaris=snv_11
Sun OpenSolaris=snv_10
Sun OpenSolaris=snv_59
Sun OpenSolaris=snv_48
Sun OpenSolaris=snv_97
Sun OpenSolaris=snv_01
Sun OpenSolaris=snv_25
Sun OpenSolaris=snv_18
Sun OpenSolaris=snv_51
Sun OpenSolaris=snv_26
Sun OpenSolaris=snv_16
Sun OpenSolaris=snv_100
Sun OpenSolaris=snv_12
Sun OpenSolaris=snv_96
Sun OpenSolaris=snv_81
Sun OpenSolaris=snv_94
Sun OpenSolaris=snv_19
Sun OpenSolaris=snv_98
Sun OpenSolaris=snv_32
Sun OpenSolaris=snv_80
Sun OpenSolaris=snv_95
Sun OpenSolaris=snv_108
Sun OpenSolaris=snv_34
Sun OpenSolaris=snv_02
Sun OpenSolaris=snv_78
Sun OpenSolaris=snv_21
Sun OpenSolaris=snv_76
Sun OpenSolaris=snv_15
Sun OpenSolaris=snv_20
Sun OpenSolaris=snv_55
Sun OpenSolaris=snv_23
Sun OpenSolaris=snv_44
Sun OpenSolaris=snv_60
Sun OpenSolaris=snv_53
Sun OpenSolaris=snv_58
Sun OpenSolaris=snv_24
Sun OpenSolaris=snv_99
Sun OpenSolaris=snv_109
Sun OpenSolaris=snv_75
Sun OpenSolaris=snv_102
Sun OpenSolaris=snv_41
Sun OpenSolaris=snv_47
Sun OpenSolaris=snv_14
Sun OpenSolaris=snv_35
Sun OpenSolaris=snv_110
Sun OpenSolaris=snv_17
Sun OpenSolaris=snv_62
Sun OpenSolaris=snv_03
Sun OpenSolaris=snv_29
Sun OpenSolaris=snv_36
Sun OpenSolaris=snv_30
Sun OpenSolaris=snv_70
Sun OpenSolaris=snv_90
Sun OpenSolaris=snv_93
Sun OpenSolaris=snv_110
Sun OpenSolaris=snv_85
Sun OpenSolaris=snv_26
Sun OpenSolaris=snv_50
Sun OpenSolaris=snv_72
Sun OpenSolaris=snv_67
Sun OpenSolaris=snv_87
Sun OpenSolaris=snv_92
Sun OpenSolaris=snv_01
Sun OpenSolaris=snv_77
Sun OpenSolaris=snv_18
Sun OpenSolaris=snv_53
Sun OpenSolaris=snv_41
Sun OpenSolaris=snv_11
Sun OpenSolaris=snv_39
Sun OpenSolaris=snv_23
Sun OpenSolaris=snv_80
Sun OpenSolaris=snv_07
Sun OpenSolaris=snv_55
Sun OpenSolaris=snv_24
Sun OpenSolaris=snv_31
Sun OpenSolaris=snv_04
Sun OpenSolaris=snv_58
Sun OpenSolaris=snv_05
Sun OpenSolaris=snv_103
Sun OpenSolaris=snv_84
Sun OpenSolaris=snv_106
Sun OpenSolaris=snv_65
Sun OpenSolaris=snv_17
Sun OpenSolaris=snv_86
Sun OpenSolaris=snv_62
Sun OpenSolaris=snv_100
Sun OpenSolaris=snv_35
Sun OpenSolaris=snv_09
Sun OpenSolaris=snv_34
Sun OpenSolaris=snv_66
Sun OpenSolaris=snv_44
Sun OpenSolaris=snv_89
Sun OpenSolaris=snv_29
Sun OpenSolaris=snv_59
Sun OpenSolaris=snv_10
Sun OpenSolaris=snv_78
Sun OpenSolaris=snv_96
Sun OpenSolaris=snv_43
Sun OpenSolaris=snv_48
Sun OpenSolaris=snv_99
Sun OpenSolaris=snv_107
Sun OpenSolaris=snv_25
Sun OpenSolaris=snv_79
Sun OpenSolaris=snv_63
Sun OpenSolaris=snv_37
Sun OpenSolaris=snv_40
Sun OpenSolaris=snv_45
Sun OpenSolaris=snv_13
Sun OpenSolaris=snv_06
Sun OpenSolaris=snv_52
Sun OpenSolaris=snv_16
Sun OpenSolaris=snv_69
Sun OpenSolaris=snv_98
Sun OpenSolaris=snv_109
Sun OpenSolaris=snv_46
Sun OpenSolaris=snv_71
Sun OpenSolaris=snv_64
Sun OpenSolaris=snv_20
Sun OpenSolaris=snv_82
Sun OpenSolaris=snv_102
Sun OpenSolaris=snv_14
Sun OpenSolaris=snv_105
Sun OpenSolaris=snv_108
Sun OpenSolaris=snv_57
Sun OpenSolaris=snv_60
Sun OpenSolaris=snv_03
Sun OpenSolaris=snv_75
Sun OpenSolaris=snv_81
Sun OpenSolaris=snv_19
Sun OpenSolaris=snv_95
Sun OpenSolaris=snv_21
Sun OpenSolaris=snv_47
Sun OpenSolaris=snv_49
Sun OpenSolaris=snv_88
Sun OpenSolaris=snv_73
Sun OpenSolaris=snv_15
Sun OpenSolaris=snv_02
Sun OpenSolaris=snv_104
Sun OpenSolaris=snv_08
Sun OpenSolaris=snv_61
Sun OpenSolaris=snv_94
Sun OpenSolaris=snv_101
Sun OpenSolaris=snv_83
Sun OpenSolaris=snv_68
Sun OpenSolaris=snv_97
Sun OpenSolaris=snv_28
Sun OpenSolaris=snv_27
Sun OpenSolaris=snv_32
Sun OpenSolaris=snv_56
Sun OpenSolaris=snv_42
Sun OpenSolaris=snv_74
Sun OpenSolaris=snv_33
Sun OpenSolaris=snv_91
Sun OpenSolaris=snv_22
Sun OpenSolaris=snv_76
Sun OpenSolaris=snv_54
Sun OpenSolaris=snv_12
Sun OpenSolaris=snv_38
Sun OpenSolaris=snv_51
Sun Solaris=10.0
Remediation
Patch Available
Event History
Mar 10, 2009
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Data Sourced
via NVD·08:30 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-0870?
CVE-2009-0870 is classified as a denial of service vulnerability.
2
How do I fix CVE-2009-0870?
To fix CVE-2009-0870, users should apply the relevant patches for their affected Solaris or OpenSolaris installations.
3
What systems are affected by CVE-2009-0870?
CVE-2009-0870 affects various versions of Sun Solaris 10 and OpenSolaris prior to snv_111.
4
What is the impact of CVE-2009-0870?
The impact of CVE-2009-0870 is that it can cause a denial of service, leading to an infinite loop and system hang.
5
Can local users exploit CVE-2009-0870?
Yes, local users can exploit CVE-2009-0870 by accessing a hsfs filesystem shared through NFSv4.