First published: Thu Oct 01 2009(Updated: )
Multiple memory leaks in the IP module in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv_109, allow local users to cause a denial of service (memory consumption) via vectors related to (1) M_DATA, (2) M_PROTO, (3) M_PCPROTO, and (4) M_SIG STREAMS messages.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Oracle Solaris SPARC | =8 | |
Oracle Solaris SPARC | =9 | |
Oracle Solaris SPARC | =10 | |
Solaris | <snv_109 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2009-3519 is considered a high severity vulnerability due to the potential for denial of service caused by memory consumption.
To mitigate CVE-2009-3519, upgrading to a patched version of Oracle Solaris or OpenSolaris is recommended.
CVE-2009-3519 affects local users of Sun Solaris versions 8, 9, and 10, as well as OpenSolaris before snv_109.
CVE-2009-3519 can be triggered by M_DATA, M_PROTO, M_PCPROTO, and M_SIG STREAMS messages.
The primary consequence of CVE-2009-3519 is a denial of service due to memory leaks that lead to excessive memory consumption.