Sun Solaris Kernel 'udp(7p)' Remote Denial Of Service Vulnerability

Bugtraq ID:	35545
Class:	Unknown
CVE:	CVE-2009-2297
Remote:	Yes
Local:	No
Published:	Jun 30 2009 12:00AM
Updated:	Jul 09 2009 05:06PM
Credit:	Sun
Vulnerable:	Sun Solaris 10.0_x86 Sun Solaris 10.0 Sun OpenSolaris build snv_99 Sun OpenSolaris build snv_96 Sun OpenSolaris build snv_95 Sun OpenSolaris build snv_94 Sun OpenSolaris build snv_93 Sun OpenSolaris build snv_92 Sun OpenSolaris build snv_91 Sun OpenSolaris build snv_90 Sun OpenSolaris build snv_108 Sun OpenSolaris build snv_107 Sun OpenSolaris build snv_106 Sun OpenSolaris build snv_105 Sun OpenSolaris build snv_104 Sun OpenSolaris build snv_104 Sun OpenSolaris build snv_103 Sun OpenSolaris build snv_102 Sun OpenSolaris build snv_101a Sun OpenSolaris build snv_101 Sun OpenSolaris build snv_100
Not Vulnerable:

Sun Solaris Kernel 'udp(7p)' Remote Denial Of Service Vulnerability

Sun Solaris is prone to a remote denial-of-service vulnerability that affects Solaris kernel 'udp(7p)'.

An attacker may exploit this issue to panic the system, denying services to legitimate users.

The issue affects Solaris 10 and OpenSolaris based on builds snv_90 through snv_108.

Sun Solaris Kernel 'udp(7p)' Remote Denial Of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Sun Solaris Kernel 'udp(7p)' Remote Denial Of Service Vulnerability

Solution:
The vendor has released updates. Please see the references for details.


Sun Solaris 10.0

• Sun 141414-02
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -141414-02-1

Sun Solaris 10.0_x86

• Sun 141415-04
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -141415-04-1

Sun Solaris Kernel 'udp(7p)' Remote Denial Of Service Vulnerability

References:

• Sun Solaris Homepage (Sun Microsystems)
  
• Solution 262048: A patch regression in Solaris Kernel udp(7p) (Sun)