Sun Solaris 8 KMEM_FLAGS Kernel Parameter Denial Of Service Vulnerability

Bugtraq ID:	6080
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	No
Local:	Yes
Published:	Oct 24 2002 12:00AM
Updated:	Oct 24 2002 12:00AM
Credit:	Vulnerability first detailed in a Sun Alert.
Vulnerable:	Sun Solaris 8_x86 Sun Solaris 8_sparc
Not Vulnerable:

Sun Solaris 8 KMEM_FLAGS Kernel Parameter Denial Of Service Vulnerability

A vulnerability has been reported for Sun Solaris 8. The vulnerability may result in a local unprivileged user causing the kernel to panic thus leading to a denial of service condition.

The vulnerability occurs when the kernel parameter, kmem_flags, has certain flags set. When the kernel receives this parameter with the 'TEST' or 'KMF_DEADBEEF' flags set (0x2), it may cause a kernel panic.

Sun Solaris 8 KMEM_FLAGS Kernel Parameter Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Sun Solaris 8 KMEM_FLAGS Kernel Parameter Denial Of Service Vulnerability

Solution:
The following patch is available:


Sun Solaris 8_x86

• Sun 108528-16
  http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=108528&rev=16


• Sun 108529-16
  http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=108529&rev=16

Sun Solaris 8_sparc

• Sun 108528-16
  http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=108528&rev=16

Sun Solaris 8 KMEM_FLAGS Kernel Parameter Denial Of Service Vulnerability

References:

• Sun Alert ID: 48067 (Sun)