Vulnerability Name:

CVE-2009-4226 (CCN-54574)

Assigned:2009-12-04
Published:2009-12-04
Updated:2017-08-17
Summary:Race condition in the IP module in the kernel in Sun OpenSolaris snv_106 through snv_124 allows remote attackers to cause a denial of service (NULL pointer dereference and panic) via unspecified vectors related to the (1) tcp_do_getsockname or (2) tcp_do_getpeername function.
CVSS v3 Severity:7.5 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): High
CVSS v2 Severity:7.1 High (CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C)
5.3 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Complete
7.8 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C)
5.8 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Complete
Vulnerability Type:CWE-362
Vulnerability Consequences:Denial of Service
References:Source: MITRE
Type: CNA
CVE-2009-4226

Source: CONFIRM
Type: Exploit
http://opensolaris.org/jive/thread.jspa?messageID=415069&tstart=0

Source: CCN
Type: Sun Alert ID: 268189
Security Vulnerability in the Solaris IP(7p) Kernel Module May Allow Remote Users to Panic the System, Resulting in a Denial of Service (DoS)

Source: SUNALERT
Type: Patch, Vendor Advisory
268189

Source: CCN
Type: OSVDB ID: 60874
OpenSolaris Kernel IP Module Multiple Function Race Condition DoS

Source: CCN
Type: BID-37225
Sun Solaris IP(7p) Race Condition Remote Denial of Service Vulnerability

Source: VUPEN
Type: Vendor Advisory
ADV-2009-3413

Source: XF
Type: UNKNOWN
solaris-ipkernel-dos(54574)

Source: XF
Type: UNKNOWN
solaris-ipkernel-dos(54574)

Vulnerable Configuration:Configuration 1:
  • cpe:/o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_111:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_111:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_112:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_112:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_113:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_113:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_114:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_114:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_115:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_115:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_116:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_116:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_117:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_117:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_118:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_118:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_119:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_119:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_120:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_120:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_121:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_121:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_122:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_122:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_123:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_123:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_124:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_124:*:x86:*:*:*:*:*

  • Configuration CCN 1:
  • cpe:/o:sun:opensolaris:build_snv_106::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_106::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_107::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_107::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_108::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_109::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_110::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_108::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_109::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_110::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_111::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_111::x86:*:*:*:*:*
  • AND
  • cpe:/o:sun:solaris:::x86:*:*:*:*:*
  • OR cpe:/o:sun:solaris:10.0::sparc:*:*:*:*:*

  • * Denotes that component is vulnerable
    BACK
    sun opensolaris snv_106
    sun opensolaris snv_106
    sun opensolaris snv_107
    sun opensolaris snv_107
    sun opensolaris snv_108
    sun opensolaris snv_108
    sun opensolaris snv_109
    sun opensolaris snv_109
    sun opensolaris snv_110
    sun opensolaris snv_110
    sun opensolaris snv_111
    sun opensolaris snv_111
    sun opensolaris snv_112
    sun opensolaris snv_112
    sun opensolaris snv_113
    sun opensolaris snv_113
    sun opensolaris snv_114
    sun opensolaris snv_114
    sun opensolaris snv_115
    sun opensolaris snv_115
    sun opensolaris snv_116
    sun opensolaris snv_116
    sun opensolaris snv_117
    sun opensolaris snv_117
    sun opensolaris snv_118
    sun opensolaris snv_118
    sun opensolaris snv_119
    sun opensolaris snv_119
    sun opensolaris snv_120
    sun opensolaris snv_120
    sun opensolaris snv_121
    sun opensolaris snv_121
    sun opensolaris snv_122
    sun opensolaris snv_122
    sun opensolaris snv_123
    sun opensolaris snv_123
    sun opensolaris snv_124
    sun opensolaris snv_124
    sun opensolaris build_snv_106
    sun opensolaris build_snv_106
    sun opensolaris build_snv_107
    sun opensolaris build_snv_107
    sun opensolaris build_snv_108
    sun opensolaris build_snv_109
    sun opensolaris build_snv_110
    sun opensolaris build_snv_108
    sun opensolaris build_snv_109
    sun opensolaris build_snv_110
    sun opensolaris build_snv_111
    sun opensolaris build_snv_111
    sun solaris
    sun solaris 10.0