Vulnerability Name:

CVE-2009-2187 (CCN-51325)

Assigned:2009-06-23
Published:2009-06-23
Updated:2009-06-25
Summary:Multiple memory leaks in the (1) IP and (2) IPv6 multicast implementation in the kernel in Sun Solaris 10, and OpenSolaris snv_67 through snv_93, allow local users to cause a denial of service (memory consumption) via vectors related to the association of (a) DL_ENABMULTI_REQ and (b) DL_DISABMULTI_REQ messages with ARP messages.
CVSS v3 Severity:4.0 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Low
CVSS v2 Severity:4.9 Medium (CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C)
3.7 Low (Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Complete
2.1 Low (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P)
1.6 Low (CCN Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
Vulnerability Type:CWE-399
Vulnerability Consequences:Denial of Service
References:Source: CONFIRM
Type: UNKNOWN
http://bugs.opensolaris.org/view_bug.do?bug_id=6709252

Source: CONFIRM
Type: Exploit
http://bugs.opensolaris.org/view_bug.do?bug_id=6731600

Source: MITRE
Type: CNA
CVE-2009-2187

Source: CCN
Type: SA35552
Sun Solaris IP Multicast Reception Denial of Service

Source: SECUNIA
Type: Vendor Advisory
35552

Source: CCN
Type: SA36272
Avaya CMS Solaris IP Multicast Reception Denial of Service

Source: CONFIRM
Type: Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-21-141414-01-1

Source: CCN
Type: Sun Alert ID: 262408
Security Vulnerability in the Solaris IP(7P) Multicast Reception May Lead to a Denial of Service (DoS) Condition

Source: SUNALERT
Type: Patch, Vendor Advisory
262408

Source: CCN
Type: ASA-2009-263
Security Vulnerability in the Solaris IP(7P) Multicast Reception May Lead to a Denial of Service (DoS) Condition (Sun 262408)

Source: CCN
Type: OSVDB ID: 55299
Solaris IP Multicast Reception Memory Exhaustion Local DoS

Source: BID
Type: Patch
35474

Source: CCN
Type: BID-35474
Sun Solaris 'IP(7P)' Multicast Reception Local Denial Of Service Vulnerability

Source: XF
Type: UNKNOWN
solaris-ipmulticast-dos(51325)

Vulnerable Configuration:Configuration 1:
  • cpe:/o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:solaris:10.0:*:sparc:*:*:*:*:*
  • AND
  • cpe:/o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:solaris:10.0:*:x86:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/o:sun:opensolaris:build_snv_89::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_89::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_79b::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_88::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_79b::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_88::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_68::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_69::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_72::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_75::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_76::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_78::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_81::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_82::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_84::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_85::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_87::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_86::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_67::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_70::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_71::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_73::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_74::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_77::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_79::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_83::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_67::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_71::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_68::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_72::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_77::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_70::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_74::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_73::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_76::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_69::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_75::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_78::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_84::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_83::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_79::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_86::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_85::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_87::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_80::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_82::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_81::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_80::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_91::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_91::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_90::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_90::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_92::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_92::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_93::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_93::x86:*:*:*:*:*
  • AND
  • cpe:/o:sun:solaris:10::sparc:*:*:*:*:*
  • OR cpe:/o:sun:solaris:10::x86:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    sun opensolaris snv_67
    sun opensolaris snv_68
    sun opensolaris snv_69
    sun opensolaris snv_70
    sun opensolaris snv_71
    sun opensolaris snv_72
    sun opensolaris snv_73
    sun opensolaris snv_74
    sun opensolaris snv_75
    sun opensolaris snv_76
    sun opensolaris snv_77
    sun opensolaris snv_78
    sun opensolaris snv_79
    sun opensolaris snv_80
    sun opensolaris snv_81
    sun opensolaris snv_82
    sun opensolaris snv_83
    sun opensolaris snv_84
    sun opensolaris snv_85
    sun opensolaris snv_86
    sun opensolaris snv_87
    sun opensolaris snv_88
    sun opensolaris snv_89
    sun opensolaris snv_90
    sun opensolaris snv_91
    sun opensolaris snv_92
    sun opensolaris snv_93
    sun solaris 10.0
    sun opensolaris snv_67
    sun opensolaris snv_68
    sun opensolaris snv_69
    sun opensolaris snv_70
    sun opensolaris snv_71
    sun opensolaris snv_72
    sun opensolaris snv_73
    sun opensolaris snv_74
    sun opensolaris snv_75
    sun opensolaris snv_76
    sun opensolaris snv_77
    sun opensolaris snv_78
    sun opensolaris snv_79
    sun opensolaris snv_80
    sun opensolaris snv_81
    sun opensolaris snv_82
    sun opensolaris snv_83
    sun opensolaris snv_84
    sun opensolaris snv_85
    sun opensolaris snv_86
    sun opensolaris snv_87
    sun opensolaris snv_88
    sun opensolaris snv_89
    sun opensolaris snv_90
    sun opensolaris snv_91
    sun opensolaris snv_92
    sun opensolaris snv_93
    sun solaris 10.0
    sun opensolaris build_snv_89
    sun opensolaris build_snv_89
    sun opensolaris build_snv_79b
    sun opensolaris build_snv_88
    sun opensolaris build_snv_79b
    sun opensolaris build_snv_88
    sun opensolaris build_snv_68
    sun opensolaris build_snv_69
    sun opensolaris build_snv_72
    sun opensolaris build_snv_75
    sun opensolaris build_snv_76
    sun opensolaris build_snv_78
    sun opensolaris build_snv_81
    sun opensolaris build_snv_82
    sun opensolaris build_snv_84
    sun opensolaris build_snv_85
    sun opensolaris build_snv_87
    sun opensolaris build_snv_86
    sun opensolaris build_snv_67
    sun opensolaris build_snv_70
    sun opensolaris build_snv_71
    sun opensolaris build_snv_73
    sun opensolaris build_snv_74
    sun opensolaris build_snv_77
    sun opensolaris build_snv_79
    sun opensolaris build_snv_83
    sun opensolaris build_snv_67
    sun opensolaris build_snv_71
    sun opensolaris build_snv_68
    sun opensolaris build_snv_72
    sun opensolaris build_snv_77
    sun opensolaris build_snv_70
    sun opensolaris build_snv_74
    sun opensolaris build_snv_73
    sun opensolaris build_snv_76
    sun opensolaris build_snv_69
    sun opensolaris build_snv_75
    sun opensolaris build_snv_78
    sun opensolaris build_snv_84
    sun opensolaris build_snv_83
    sun opensolaris build_snv_79
    sun opensolaris build_snv_86
    sun opensolaris build_snv_85
    sun opensolaris build_snv_87
    sun opensolaris build_snv_80
    sun opensolaris build_snv_82
    sun opensolaris build_snv_81
    sun opensolaris build_snv_80
    sun opensolaris build_snv_91
    sun opensolaris build_snv_91
    sun opensolaris build_snv_90
    sun opensolaris build_snv_90
    sun opensolaris build_snv_92
    sun opensolaris build_snv_92
    sun opensolaris build_snv_93
    sun opensolaris build_snv_93
    sun solaris 10
    sun solaris 10