CVE-2009-2857: Medium severity oracle solaris and zettabyte file system (zfs) vulnerability

Published Aug 19, 2009
·
Updated

The kernel in Sun Solaris 8, 9, and 10, and OpenSolaris before snv103, does not properly handle interaction between the filesystem and virtual-memory implementations, which allows local users to cause a denial of service (deadlock and system halt) via vectors involving mmap and write operations on the same file.

Affected Software

319 affected components
Sun OpenSolaris<=snv_102
Sun OpenSolaris=snv_36
Sun OpenSolaris=snv_30
Sun OpenSolaris=snv_70
Sun OpenSolaris=snv_33
Sun OpenSolaris=snv_14
Sun OpenSolaris=snv_101
Sun OpenSolaris=snv_90
Sun OpenSolaris=snv_93
Sun OpenSolaris=snv_85
Sun OpenSolaris=snv_01
Sun OpenSolaris=snv_57
Sun OpenSolaris=snv_67
Sun OpenSolaris=snv_87
Sun OpenSolaris=snv_26
Sun OpenSolaris=snv_50
Sun OpenSolaris=snv_12
Sun OpenSolaris=snv_57
Sun OpenSolaris=snv_80
Sun OpenSolaris=snv_47
Sun OpenSolaris=snv_73
Sun OpenSolaris=snv_32
Sun OpenSolaris=snv_70
Sun OpenSolaris=snv_34
Sun OpenSolaris=snv_72
Sun OpenSolaris=snv_67
Sun OpenSolaris=snv_30
Sun OpenSolaris=snv_87
Sun OpenSolaris=snv_91
Sun OpenSolaris=snv_08
Sun OpenSolaris=snv_92
Sun OpenSolaris=snv_01
Sun OpenSolaris=snv_85
Sun OpenSolaris=snv_77
Sun OpenSolaris=snv_66
Sun OpenSolaris=snv_75
Sun OpenSolaris=snv_81
Sun OpenSolaris=snv_25
Sun OpenSolaris=snv_18
Sun OpenSolaris=snv_53
Sun OpenSolaris=snv_41
Sun OpenSolaris=snv_74
Sun OpenSolaris=snv_11
Sun OpenSolaris=snv_07
Sun OpenSolaris=snv_98
Sun OpenSolaris=snv_66
Sun OpenSolaris=snv_86
Sun OpenSolaris=snv_21
Sun OpenSolaris=snv_27
Sun OpenSolaris=snv_39
Sun OpenSolaris=snv_51
Sun OpenSolaris=snv_45
Sun OpenSolaris=snv_23
Sun OpenSolaris=snv_80
Sun OpenSolaris=snv_13
Sun OpenSolaris=snv_46
Sun OpenSolaris=snv_52
Sun OpenSolaris=snv_52
Sun OpenSolaris=snv_68
Sun OpenSolaris=snv_07
Sun OpenSolaris=snv_82
Sun OpenSolaris=snv_55
Sun OpenSolaris=snv_72
Sun OpenSolaris=snv_24
Sun OpenSolaris=snv_101b
Sun OpenSolaris=snv_41
Sun OpenSolaris=snv_88
Sun OpenSolaris=snv_31
Sun OpenSolaris=snv_05
Sun OpenSolaris=snv_07
Sun OpenSolaris=snv_56
Sun OpenSolaris=snv_20
Sun OpenSolaris=snv_43
Sun OpenSolaris=snv_39
Sun OpenSolaris=snv_101
Sun OpenSolaris=snv_50
Sun OpenSolaris=snv_04
Sun OpenSolaris=snv_83
Sun OpenSolaris=snv_54
Sun OpenSolaris=snv_93
Sun OpenSolaris=snv_76
Sun OpenSolaris=snv_31
Sun OpenSolaris=snv_88-sparc
Sun OpenSolaris=snv_33
Sun OpenSolaris=snv_58
Sun OpenSolaris=snv_05
Sun OpenSolaris=snv_54
Sun OpenSolaris=snv_40
Sun OpenSolaris=snv_84
Sun OpenSolaris=snv_65
Sun OpenSolaris=snv_26
Sun OpenSolaris=snv_17
Sun OpenSolaris=snv_49
Sun OpenSolaris=snv_87
Sun OpenSolaris=snv_94
Sun OpenSolaris=snv_09
Sun OpenSolaris=snv_65
Sun OpenSolaris=snv_17
Sun OpenSolaris=snv_86
Sun OpenSolaris=snv_05
Sun OpenSolaris=snv_06
Sun OpenSolaris=snv_62
Sun OpenSolaris=snv_37
Sun OpenSolaris=snv_100
Sun OpenSolaris=snv_15
Sun OpenSolaris=snv_48
Sun OpenSolaris=snv_71
Sun OpenSolaris=snv_22
Sun OpenSolaris=snv_04
Sun OpenSolaris=snv_35
Sun OpenSolaris=snv_13
Sun OpenSolaris=snv_09
Sun OpenSolaris=snv_64
Sun OpenSolaris=snv_34
Sun OpenSolaris=snv_42
Sun OpenSolaris=snv_77
Sun OpenSolaris=snv_69
Sun OpenSolaris=snv_66
Sun OpenSolaris=snv_61
Sun OpenSolaris=snv_79
Sun OpenSolaris=snv_90-x86
Sun OpenSolaris=snv_44
Sun OpenSolaris=snv_42
Sun OpenSolaris=snv_44
Sun OpenSolaris=snv_38
Sun OpenSolaris=snv_89
Sun OpenSolaris=snv_90
Sun OpenSolaris=snv_73
Sun OpenSolaris=snv_61
Sun OpenSolaris=snv_36
Sun OpenSolaris=snv_29
Sun OpenSolaris=snv_59
Sun OpenSolaris=snv_10
Sun OpenSolaris=snv_35
Sun OpenSolaris=snv_70
Sun OpenSolaris=snv_38
Sun OpenSolaris=snv_45
Sun OpenSolaris=snv_28
Sun OpenSolaris=snv_78
Sun OpenSolaris=snv_08
Sun OpenSolaris=snv_96
Sun OpenSolaris=snv_56
Sun OpenSolaris=snv_11
Sun OpenSolaris=snv_10
Sun OpenSolaris=snv_43
Sun OpenSolaris=snv_48
Sun OpenSolaris=snv_99
Sun OpenSolaris=snv_59
Sun OpenSolaris=snv_28
Sun OpenSolaris=snv_74
Sun OpenSolaris=snv_48
Sun OpenSolaris=snv_97
Sun OpenSolaris=snv_01
Sun OpenSolaris=snv_25
Sun OpenSolaris=snv_16
Sun OpenSolaris=snv_19
Sun OpenSolaris=snv_25
Sun OpenSolaris=snv_18
Sun OpenSolaris=snv_97
Sun OpenSolaris=snv_51
Sun OpenSolaris=snv_26
Sun OpenSolaris=snv_10
Sun OpenSolaris=snv_79
Sun OpenSolaris=snv_63
Sun OpenSolaris=snv_83
Sun OpenSolaris=snv_16
Sun OpenSolaris=snv_100
Sun OpenSolaris=snv_82
Sun OpenSolaris=snv_88
Sun OpenSolaris=snv_12
Sun OpenSolaris=snv_96
Sun OpenSolaris=snv_78
Sun OpenSolaris=snv_81
Sun OpenSolaris=snv_37
Sun OpenSolaris=snv_94
Sun OpenSolaris=snv_40
Sun OpenSolaris=snv_50
Sun OpenSolaris=snv_19
Sun OpenSolaris=snv_86
Sun OpenSolaris=snv_98
Sun OpenSolaris=snv_27
Sun OpenSolaris=snv_45
Sun OpenSolaris=snv_13
Sun OpenSolaris=snv_06
Sun OpenSolaris=snv_02
Sun OpenSolaris=snv_06
Sun OpenSolaris=snv_32
Sun OpenSolaris=snv_100
Sun OpenSolaris=snv_85
Sun OpenSolaris=snv_52
Sun OpenSolaris=snv_22
Sun OpenSolaris=snv_16
Sun OpenSolaris=snv_80
Sun OpenSolaris=snv_59
Sun OpenSolaris=snv_69
Sun OpenSolaris=snv_98
Sun OpenSolaris=snv_91
Sun OpenSolaris=snv_68
Sun OpenSolaris=snv_77
Sun OpenSolaris=snv_67
Sun OpenSolaris=snv_46
Sun OpenSolaris=snv_71
Sun OpenSolaris=snv_95
Sun OpenSolaris=snv_64
Sun OpenSolaris=snv_34
Sun OpenSolaris=snv_63
Sun OpenSolaris=snv_20
Sun OpenSolaris=snv_49
Sun OpenSolaris=snv_82
Sun OpenSolaris=snv_39
Sun OpenSolaris=snv_102
Sun OpenSolaris=snv_02
Sun OpenSolaris=snv_14
Sun OpenSolaris=snv_78
Sun OpenSolaris=snv_57
Sun OpenSolaris=snv_60
Sun OpenSolaris=snv_03
Sun OpenSolaris=snv_21
Sun OpenSolaris=snv_92
Sun OpenSolaris=snv_75
Sun OpenSolaris=snv_71
Sun OpenSolaris=snv_64
Sun OpenSolaris=snv_81
Sun OpenSolaris=snv_46
Sun OpenSolaris=snv_19
Sun OpenSolaris=snv_76
Sun OpenSolaris=snv_95
Sun OpenSolaris=snv_15
Sun OpenSolaris=snv_21
Sun OpenSolaris=snv_47
Sun OpenSolaris=snv_60
Sun OpenSolaris=snv_20
Sun OpenSolaris=snv_95
Sun OpenSolaris=snv_72
Sun OpenSolaris=snv_93
Sun OpenSolaris=snv_29
Sun OpenSolaris=snv_49
Sun OpenSolaris=snv_58
Sun OpenSolaris=snv_88
Sun OpenSolaris=snv_55
Sun OpenSolaris=snv_23
Sun OpenSolaris=snv_40
Sun OpenSolaris=snv_73
Sun OpenSolaris=snv_37
Sun OpenSolaris=snv_15
Sun OpenSolaris=snv_02
Sun OpenSolaris=snv_69
Sun OpenSolaris=snv_84
Sun OpenSolaris=snv_36
Sun OpenSolaris=snv_43
Sun OpenSolaris=snv_44
Sun OpenSolaris=snv_60
Sun OpenSolaris=snv_92
Sun OpenSolaris=snv_08
Sun OpenSolaris=snv_03
Sun OpenSolaris=snv_11
Sun OpenSolaris=snv_63
Sun OpenSolaris=snv_24
Sun OpenSolaris=snv_04
Sun OpenSolaris=snv_61
Sun OpenSolaris=snv_55
Sun OpenSolaris=snv_53
Sun OpenSolaris=snv_94
Sun OpenSolaris=snv_58
Sun OpenSolaris=snv_101
Sun OpenSolaris=snv_62
Sun OpenSolaris=snv_83
Sun OpenSolaris=snv_90
Sun OpenSolaris=snv_65
Sun OpenSolaris=snv_68
Sun OpenSolaris=snv_97
Sun OpenSolaris=snv_28
Sun OpenSolaris=snv_96
Sun OpenSolaris=snv_24
Sun OpenSolaris=snv_99
Sun OpenSolaris=snv_31
Sun OpenSolaris=snv_53
Sun OpenSolaris=snv_27
Sun OpenSolaris=snv_32
Sun OpenSolaris=snv_79
Sun OpenSolaris=snv_75
Sun OpenSolaris=snv_56
Sun OpenSolaris=snv_102
Sun OpenSolaris=snv_09
Sun OpenSolaris=snv_42
Sun OpenSolaris=snv_74
Sun OpenSolaris=snv_18
Sun OpenSolaris=snv_41
Sun OpenSolaris=snv_33
Sun OpenSolaris=snv_101a
Sun OpenSolaris=snv_47
Sun OpenSolaris=snv_30
Sun OpenSolaris=snv_84
Sun OpenSolaris=snv_14
Sun OpenSolaris=snv_35
Sun OpenSolaris=snv_99
Sun OpenSolaris=snv_91
Sun OpenSolaris=snv_22
Sun OpenSolaris=snv_76
Sun OpenSolaris=snv_54
Sun OpenSolaris=snv_23
Sun OpenSolaris=snv_62
Sun OpenSolaris=snv_12
Sun OpenSolaris=snv_89
Sun OpenSolaris=snv_89
Sun OpenSolaris=snv_38
Sun OpenSolaris=snv_03
Sun OpenSolaris=snv_51
Sun OpenSolaris=snv_29
Sun Solaris=8
Sun Solaris=9
Sun Solaris=9
Sun Solaris=8
Sun Solaris=10
Sun Solaris=10
Oracle OpenSolaris<snv_103
Oracle Solaris=8
Oracle Solaris=9
Oracle Solaris=10

Remediation

Patch Available

http://sunsolve.sun.com/search/document.do?assetkey=1-21-127721-02-1

Patch Available

http://sunsolve.sun.com/search/document.do?assetkey=1-66-257848-1

Event History

Aug 19, 2009
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description

Frequently Asked Questions

1

What is the severity of CVE-2009-2857?

CVE-2009-2857 has a severity rating of medium due to its potential to cause denial of service.

2

How do I fix CVE-2009-2857?

To fix CVE-2009-2857, upgrade to a version of Solaris or OpenSolaris that is patched for this vulnerability.

3

Who is affected by CVE-2009-2857?

CVE-2009-2857 affects users of Solaris 8, 9, and 10, as well as OpenSolaris prior to snv_102.

4

What vulnerabilities are related to CVE-2009-2857?

CVE-2009-2857 is related to vulnerabilities that affect the interaction between the filesystem and virtual-memory implementations.

5

Is there a workaround for CVE-2009-2857?

There is no documented workaround for CVE-2009-2857 other than upgrading to a patched version of the affected software.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203