Vulnerability Name:

CVE-2009-3899 (CCN-54122)

Assigned:2009-11-02
Published:2009-11-02
Updated:2017-09-19
Summary:Memory leak in the Sockets Direct Protocol (SDP) driver in Sun Solaris 10, and OpenSolaris snv_57 through snv_94, allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.
CVSS v3 Severity:5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Low
CVSS v2 Severity:7.8 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C)
5.8 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Complete
5.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)
3.7 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
Vulnerability Type:CWE-399
Vulnerability Consequences:Denial of Service
References:Source: MITRE
Type: CNA
CVE-2009-3899

Source: CCN
Type: SA37249
Sun Solaris Sockets Direct Protocol Driver Denial of Service

Source: CCN
Type: SA37883
Avaya CMS Multiple Vulnerabilities

Source: CCN
Type: SECTRACK ID: 1023124
Solaris Sockets Direct Protocol Driver Flaw Lets Remote and Local Users Deny Service

Source: SECTRACK
Type: UNKNOWN
1023124

Source: CONFIRM
Type: Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-21-141444-09-1

Source: CCN
Type: Sun Alert ID: 264730
A Security Vulnerability in Solaris Sockets Direct Protocol (SDP) Driver (sdp(7D)) may Allow Users to Exhaust Kernel Memory

Source: SUNALERT
Type: Vendor Advisory
264730

Source: CCN
Type: OSVDB ID: 59657
Solaris Sockets Direct Protocol (SDP) driver (sdp(7D)) Unspecified Remote Kernel Memory Exhaustion DoS

Source: BID
Type: Patch
36904

Source: CCN
Type: BID-36904
Sun Solaris Sockets Direct Protocol (SDP) Driver 'sdp(7D)' Remote Denial of Service Vulnerability

Source: VUPEN
Type: Vendor Advisory
ADV-2009-3130

Source: XF
Type: UNKNOWN
solaris-sdp7d-dos(54122)

Source: OVAL
Type: UNKNOWN
oval:org.mitre.oval:def:6563

Vulnerable Configuration:Configuration 1:
  • cpe:/o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:solaris:10:*:sparc:*:*:*:*:*

    • Configuration 2:
  • cpe:/o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:solaris:10:*:x86:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/o:sun:opensolaris:build_snv_89::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_89::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_64::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_79b::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_88::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_64::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_79b::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_88::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_58::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_59::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_60::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_62::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_65::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_68::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_69::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_72::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_75::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_76::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_78::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_81::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_82::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_84::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_85::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_87::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_86::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_57::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_61::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_63::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_66::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_67::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_70::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_71::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_73::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_74::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_77::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_79::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_83::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_57::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_67::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_66::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_59::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_65::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_58::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_61::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_63::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_60::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_62::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_71::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_68::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_72::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_77::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_70::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_74::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_73::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_76::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_69::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_75::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_78::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_84::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_83::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_79::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_86::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_85::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_87::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_80::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_82::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_81::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_80::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_91::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_91::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_90::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_90::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_92::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_92::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_93::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_94::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_94::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_93::x86:*:*:*:*:*
  • AND
  • cpe:/o:sun:solaris:10::sparc:*:*:*:*:*
  • OR cpe:/o:sun:solaris:10::x86:*:*:*:*:*
  • OR cpe:/a:avaya:communication_manager:-:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.mitre.oval:def:6563
    V
    		A security vulnerability in Solaris Sockets Direct Protocol (SDP) driver (sdp(7D)) may allow a local or remote unprivileged user to exhaust all kernel memory
    2010-01-25
    BACK
    sun opensolaris snv_57
    sun opensolaris snv_58
    sun opensolaris snv_59
    sun opensolaris snv_60
    sun opensolaris snv_61
    sun opensolaris snv_62
    sun opensolaris snv_63
    sun opensolaris snv_64
    sun opensolaris snv_65
    sun opensolaris snv_66
    sun opensolaris snv_67
    sun opensolaris snv_68
    sun opensolaris snv_69
    sun opensolaris snv_70
    sun opensolaris snv_71
    sun opensolaris snv_72
    sun opensolaris snv_73
    sun opensolaris snv_74
    sun opensolaris snv_75
    sun opensolaris snv_76
    sun opensolaris snv_77
    sun opensolaris snv_78
    sun opensolaris snv_79
    sun opensolaris snv_80
    sun opensolaris snv_81
    sun opensolaris snv_82
    sun opensolaris snv_83
    sun opensolaris snv_84
    sun opensolaris snv_85
    sun opensolaris snv_86
    sun opensolaris snv_87
    sun opensolaris snv_88
    sun opensolaris snv_89
    sun opensolaris snv_90
    sun opensolaris snv_91
    sun opensolaris snv_92
    sun opensolaris snv_93
    sun opensolaris snv_94
    sun solaris 10
    sun opensolaris snv_57
    sun opensolaris snv_58
    sun opensolaris snv_59
    sun opensolaris snv_60
    sun opensolaris snv_61
    sun opensolaris snv_62
    sun opensolaris snv_63
    sun opensolaris snv_64
    sun opensolaris snv_65
    sun opensolaris snv_66
    sun opensolaris snv_67
    sun opensolaris snv_68
    sun opensolaris snv_69
    sun opensolaris snv_70
    sun opensolaris snv_71
    sun opensolaris snv_72
    sun opensolaris snv_73
    sun opensolaris snv_74
    sun opensolaris snv_75
    sun opensolaris snv_76
    sun opensolaris snv_77
    sun opensolaris snv_78
    sun opensolaris snv_79
    sun opensolaris snv_80
    sun opensolaris snv_81
    sun opensolaris snv_82
    sun opensolaris snv_83
    sun opensolaris snv_84
    sun opensolaris snv_85
    sun opensolaris snv_86
    sun opensolaris snv_87
    sun opensolaris snv_88
    sun opensolaris snv_89
    sun opensolaris snv_90
    sun opensolaris snv_91
    sun opensolaris snv_92
    sun opensolaris snv_93
    sun opensolaris snv_94
    sun solaris 10
    sun opensolaris build_snv_89
    sun opensolaris build_snv_89
    sun opensolaris build_snv_64
    sun opensolaris build_snv_79b
    sun opensolaris build_snv_88
    sun opensolaris build_snv_64
    sun opensolaris build_snv_79b
    sun opensolaris build_snv_88
    sun opensolaris build_snv_58
    sun opensolaris build_snv_59
    sun opensolaris build_snv_60
    sun opensolaris build_snv_62
    sun opensolaris build_snv_65
    sun opensolaris build_snv_68
    sun opensolaris build_snv_69
    sun opensolaris build_snv_72
    sun opensolaris build_snv_75
    sun opensolaris build_snv_76
    sun opensolaris build_snv_78
    sun opensolaris build_snv_81
    sun opensolaris build_snv_82
    sun opensolaris build_snv_84
    sun opensolaris build_snv_85
    sun opensolaris build_snv_87
    sun opensolaris build_snv_86
    sun opensolaris build_snv_57
    sun opensolaris build_snv_61
    sun opensolaris build_snv_63
    sun opensolaris build_snv_66
    sun opensolaris build_snv_67
    sun opensolaris build_snv_70
    sun opensolaris build_snv_71
    sun opensolaris build_snv_73
    sun opensolaris build_snv_74
    sun opensolaris build_snv_77
    sun opensolaris build_snv_79
    sun opensolaris build_snv_83
    sun opensolaris build_snv_57
    sun opensolaris build_snv_67
    sun opensolaris build_snv_66
    sun opensolaris build_snv_59
    sun opensolaris build_snv_65
    sun opensolaris build_snv_58
    sun opensolaris build_snv_61
    sun opensolaris build_snv_63
    sun opensolaris build_snv_60
    sun opensolaris build_snv_62
    sun opensolaris build_snv_71
    sun opensolaris build_snv_68
    sun opensolaris build_snv_72
    sun opensolaris build_snv_77
    sun opensolaris build_snv_70
    sun opensolaris build_snv_74
    sun opensolaris build_snv_73
    sun opensolaris build_snv_76
    sun opensolaris build_snv_69
    sun opensolaris build_snv_75
    sun opensolaris build_snv_78
    sun opensolaris build_snv_84
    sun opensolaris build_snv_83
    sun opensolaris build_snv_79
    sun opensolaris build_snv_86
    sun opensolaris build_snv_85
    sun opensolaris build_snv_87
    sun opensolaris build_snv_80
    sun opensolaris build_snv_82
    sun opensolaris build_snv_81
    sun opensolaris build_snv_80
    sun opensolaris build_snv_91
    sun opensolaris build_snv_91
    sun opensolaris build_snv_90
    sun opensolaris build_snv_90
    sun opensolaris build_snv_92
    sun opensolaris build_snv_92
    sun opensolaris build_snv_93
    sun opensolaris build_snv_94
    sun opensolaris build_snv_94
    sun opensolaris build_snv_93
    sun solaris 10
    sun solaris 10
    avaya communication manager -