Vulnerability CVE-2009-2137 - CERT Civis.Net

Vulnerability Name:

CVE-2009-2137 (CCN-51272)

Assigned:

2009-06-18

Published:

2009-06-18

Updated:

2009-07-02

Summary:

Memory leak in the Ultra-SPARC T2 crypto provider device driver (aka n2cp) in Sun Solaris 10, and OpenSolaris snv_54 through snv_112, allows context-dependent attackers to cause a denial of service (memory consumption) via unspecified vectors related to a large keylen value.

CVSS v3 Severity:

5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Low

CVSS v2 Severity:

7.8 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C)
5.8 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Complete

5.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)
3.7 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

Vulnerability Type:

Vulnerability Consequences:

Denial of Service

References:

Source: MITRE
Type: CNA
CVE-2009-2137

Source: OSVDB
Type: UNKNOWN
55234

Source: CCN
Type: SA35403
Sun Solaris Ultra-SPARC T2 Crypto Provider Device Driver Vulnerability

Source: SECUNIA
Type: UNKNOWN
35403

Source: CONFIRM
Type: Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-21-140386-03-1

Source: CCN
Type: Sun Alert ID: 258828
A Memory Leak in the Solaris Ultra-SPARC T2 crypto provider device driver (n2cp(7D)) may Result in Denial of Service (DoS) to the System as a Whole

Source: SUNALERT
Type: Patch, Vendor Advisory
258828

Source: CCN
Type: ASA-2009-247
A Memory Leak in the Solaris Ultra-SPARC T2 crypto provider device driver (n2cp(7D)) may Result in Denial of Service (DoS) to the System as a Whole (Sun 258828)

Source: CCN
Type: OSVDB ID: 55234
Solaris Ultra-SPARC T2 Crypto Provider Device Driver (n2cp(7D)) Memory Exhaustion DoS

Source: CCN
Type: BID-35438
Sun Solaris Ultra-SPARC T2 Crypto Provider Device Driver Local Denial Of Service Vulnerability

Source: XF
Type: UNKNOWN
solaris-crypto-dos(51272)

Vulnerable Configuration:

Configuration 1:

cpe:/o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_111:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_112:*:sparc:*:*:*:*:*

OR cpe:/o:sun:solaris:10:*:sparc:*:*:*:*:*

Configuration CCN 1:

cpe:/o:sun:opensolaris:build_snv_89::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_95::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_64::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_79b::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_88::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_55::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_54::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_57::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_56::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_67::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_66::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_59::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_65::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_58::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_61::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_63::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_60::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_62::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_71::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_68::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_72::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_77::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_70::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_74::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_73::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_76::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_69::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_75::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_78::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_84::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_83::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_79::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_86::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_85::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_87::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_80::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_82::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_81::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_100::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_102::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_91::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_90::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_104::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_101::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_105::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_92::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_93::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_94::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_99::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_98::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_97::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_96::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_103::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_106::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_107::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_108::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_109::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_110::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_111::sparc:*:*:*:*:*

AND

cpe:/o:sun:solaris:10::sparc:*:*:*:*:*

Denotes that component is vulnerable