CVE-2009-3937 — Missing Release of Memory after Effective Lifetime in Opensolaris

CWE-3993 documents3 sources
Severity
4.9MEDIUMNVD
EPSS
0.0%
top 86.28%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
SUN Opensolaris
Timeline
PublishedNov 13
Latest updateMay 2

Description

Memory leak in Solaris TCP sockets in Sun OpenSolaris snv_106 through snv_126 allows local users to cause a denial of service (kernel memory consumption) via unspecified vectors involving tcp_sendmsg processing "ancillary data."

CVSS vector

AV:L/AC:L/C:N/I:N/A:CExploitability: 3.9 | Impact: 6.9

Affected Packages1 packages

▶NVDsun/opensolaris21 versions+20

🔴Vulnerability Details

2
GHSA
GHSA-qmr9-j5w6-2742: Memory leak in Solaris TCP sockets in Sun OpenSolaris snv_106 through snv_126 allows local users to cause a denial of service (kernel memory consumpti↗2022-05-02
▶
CVEList
CVE-2009-3937: Memory leak in Solaris TCP sockets in Sun OpenSolaris snv_106 through snv_126 allows local users to cause a denial of service (kernel memory consumpti↗2009-11-13
▶
CVE-2009-3937 — SUN Opensolaris vulnerability | cvebase