{"api_version":"1","generated_at":"2026-07-23T08:40:05+00:00","cve":"CVE-2009-3937","urls":{"html":"https://cve.report/CVE-2009-3937","api":"https://cve.report/api/cve/CVE-2009-3937.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2009-3937","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2009-3937"},"summary":{"title":"CVE-2009-3937","description":"Memory leak in Solaris TCP sockets in Sun OpenSolaris snv_106 through snv_126 allows local users to cause a denial of service (kernel memory consumption) via unspecified vectors involving tcp_sendmsg processing \"ancillary data.\"","state":"PUBLISHED","assigner":"mitre","published_at":"2009-11-13 16:30:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-399","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.9","severity":"","vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","data":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266488-1","name":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266488-1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"#266488: Security Vulnerability in Solaris TCP sockets May Allow Unprivileged Users to Cause a Denial of Service (DoS) Condition","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-68-nv_osol0906u5-1","name":"http://sunsolve.sun.com/search/document.do?assetkey=1-68-nv_osol0906u5-1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"404"},{"url":"http://www.vupen.com/english/advisories/2009/3213","name":"http://www.vupen.com/english/advisories/2009/3213","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securitytracker.com/id?1023162","name":"http://www.securitytracker.com/id?1023162","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Solaris TCP Sockets Memory Leak Lets Local Users Deny Service - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/36992","name":"http://www.securityfocus.com/bid/36992","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Sun Solaris TCP Sockets Local Denial Of Service Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3937","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3937","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2009","cve_id":"3937","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"sun","cpe5":"opensolaris","cpe6":"snv_106","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3937","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"sun","cpe5":"opensolaris","cpe6":"snv_107","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3937","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"sun","cpe5":"opensolaris","cpe6":"snv_108","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3937","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"sun","cpe5":"opensolaris","cpe6":"snv_109","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3937","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"sun","cpe5":"opensolaris","cpe6":"snv_110","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3937","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"sun","cpe5":"opensolaris","cpe6":"snv_111","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3937","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"sun","cpe5":"opensolaris","cpe6":"snv_112","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3937","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"sun","cpe5":"opensolaris","cpe6":"snv_113","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3937","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"sun","cpe5":"opensolaris","cpe6":"snv_114","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3937","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"sun","cpe5":"opensolaris","cpe6":"snv_115","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3937","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"sun","cpe5":"opensolaris","cpe6":"snv_116","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3937","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"sun","cpe5":"opensolaris","cpe6":"snv_117","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3937","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"sun","cpe5":"opensolaris","cpe6":"snv_118","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3937","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"sun","cpe5":"opensolaris","cpe6":"snv_119","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3937","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"sun","cpe5":"opensolaris","cpe6":"snv_120","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3937","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"sun","cpe5":"opensolaris","cpe6":"snv_121","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3937","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"sun","cpe5":"opensolaris","cpe6":"snv_122","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3937","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"sun","cpe5":"opensolaris","cpe6":"snv_123","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3937","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"sun","cpe5":"opensolaris","cpe6":"snv_124","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3937","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"sun","cpe5":"opensolaris","cpe6":"snv_125","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3937","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"sun","cpe5":"opensolaris","cpe6":"snv_126","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T06:45:50.539Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"36992","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/36992"},{"name":"ADV-2009-3213","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2009/3213"},{"name":"266488","tags":["vendor-advisory","x_refsource_SUNALERT","x_transferred"],"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266488-1"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-68-nv_osol0906u5-1"},{"name":"1023162","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1023162"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"descriptions":[{"lang":"en","value":"Memory leak in Solaris TCP sockets in Sun OpenSolaris snv_106 through snv_126 allows local users to cause a denial of service (kernel memory consumption) via unspecified vectors involving tcp_sendmsg processing \"ancillary data.\""}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2009-11-13T16:00:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"36992","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/36992"},{"name":"ADV-2009-3213","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2009/3213"},{"name":"266488","tags":["vendor-advisory","x_refsource_SUNALERT"],"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266488-1"},{"tags":["x_refsource_MISC"],"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-68-nv_osol0906u5-1"},{"name":"1023162","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1023162"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2009-3937","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Memory leak in Solaris TCP sockets in Sun OpenSolaris snv_106 through snv_126 allows local users to cause a denial of service (kernel memory consumption) via unspecified vectors involving tcp_sendmsg processing \"ancillary data.\""}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"36992","refsource":"BID","url":"http://www.securityfocus.com/bid/36992"},{"name":"ADV-2009-3213","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2009/3213"},{"name":"266488","refsource":"SUNALERT","url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266488-1"},{"name":"http://sunsolve.sun.com/search/document.do?assetkey=1-68-nv_osol0906u5-1","refsource":"MISC","url":"http://sunsolve.sun.com/search/document.do?assetkey=1-68-nv_osol0906u5-1"},{"name":"1023162","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1023162"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2009-3937","datePublished":"2009-11-13T16:00:00.000Z","dateReserved":"2009-11-13T00:00:00.000Z","dateUpdated":"2024-09-17T00:55:36.638Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2009-11-13 16:30:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-399","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:*:*:*:*:*:*","matchCriteriaId":"A843E5E4-E53E-484B-8A86-14DD2DA10943"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:*:*:*:*:*:*","matchCriteriaId":"81199A81-CAD2-4375-8C3B-2638D007E4FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:*:*:*:*:*:*","matchCriteriaId":"B2BFC95D-3E59-4EF4-915A-14696072C8A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:*:*:*:*:*:*","matchCriteriaId":"FDE86EE0-418E-4133-8F4B-03761F9EE0DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:*:*:*:*:*:*","matchCriteriaId":"866FF3B9-465E-4120-A2B8-089023BA3539"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_111:*:*:*:*:*:*:*","matchCriteriaId":"49D264BD-B5F4-4B50-8A93-F2D71CF8CE27"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_112:*:*:*:*:*:*:*","matchCriteriaId":"7CF2D6FB-87CF-436D-9B45-FA83F084220D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_113:*:*:*:*:*:*:*","matchCriteriaId":"542FFD48-9906-4409-8A5B-A749FED207AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_114:*:*:*:*:*:*:*","matchCriteriaId":"270BD07B-FA0D-486E-A7C7-9BACF13F0BC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_115:*:*:*:*:*:*:*","matchCriteriaId":"7AC90882-18E3-4634-B76C-4B438BF703A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_116:*:*:*:*:*:*:*","matchCriteriaId":"07D0C227-0AB1-4368-B1B5-E5711CD76BAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_117:*:*:*:*:*:*:*","matchCriteriaId":"9E254E8E-8174-4DB2-AE6F-99733777E684"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_118:*:*:*:*:*:*:*","matchCriteriaId":"B1FDE7F1-5EE4-4059-962C-19578EACE613"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_119:*:*:*:*:*:*:*","matchCriteriaId":"B37FAC5F-7C26-4326-B294-FC4EF89DFF24"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_120:*:*:*:*:*:*:*","matchCriteriaId":"D4CC63C2-6030-4CE0-B119-9BA7F8F99112"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_121:*:*:*:*:*:*:*","matchCriteriaId":"ED73BE2C-8657-4377-9C4F-9177F4DE3DE7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_122:*:*:*:*:*:*:*","matchCriteriaId":"3B0BA77C-64A0-4102-A510-8DE6C7ED119E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_123:*:*:*:*:*:*:*","matchCriteriaId":"57C0E0C9-7E78-414F-B59A-979C2A1F020F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_124:*:*:*:*:*:*:*","matchCriteriaId":"7A840894-FD5C-457F-AB03-243C4BEC0463"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_125:*:*:*:*:*:*:*","matchCriteriaId":"1B9D018D-64DB-44F6-A60B-5B7D07718324"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_126:*:*:*:*:*:*:*","matchCriteriaId":"164765D9-8D3E-4392-911C-4A176A6E648B"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2009","CveId":"3937","Ordinal":"1","Title":"CVE-2009-3937","CVE":"CVE-2009-3937","Year":"2009"},"notes":[{"CveYear":"2009","CveId":"3937","Ordinal":"1","NoteData":"Memory leak in Solaris TCP sockets in Sun OpenSolaris snv_106 through snv_126 allows local users to cause a denial of service (kernel memory consumption) via unspecified vectors involving tcp_sendmsg processing \"ancillary data.\"","Type":"Description","Title":"CVE-2009-3937"},{"CveYear":"2009","CveId":"3937","Ordinal":"2","NoteData":"2009-11-13","Type":"Other","Title":"Published"}]}}}