Vulnerability in Sun Solaris

CVE-2002-1586

Solaris 2.5.1 through 9 allows local users to cause a denial of service (kernel panic) by setting the sd_struiowrq variable in the struioget function to null, which triggers a null dereference.

EPSS: 0.003 (25.9th percentile) — read the EPSS interpretation.

Affected products

Sun Solaris — versions 2.5.1, 2.6, 7.0
Sun Sunos — versions 5.5.1, 5.7, 5.8
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (vendor-advisory, Patch, x_refsource_SUNALERT)