Vulnerability in Sun Opensolaris

CVE-2009-2137

Memory leak in the Ultra-SPARC T2 crypto provider device driver (aka n2cp) in Sun Solaris 10, and OpenSolaris snv_54 through snv_112, allows context-dependent attackers to cause a denial of service (memory consumption) via unspecified vectors related to a large keylen value.

EPSS: 0.018 (76.5th percentile) — read the EPSS interpretation.

Affected products

Sun Opensolaris — versions snv_54, snv_55, snv_56
Sun Solaris — versions 10
N/a — versions n/a

Weakness classification (CWE)

CWE-399

References

cve@mitre.org (vendor-advisory, Patch, x_refsource_SUNALERT, Vendor Advisory)
cve@mitre.org (x_refsource_CONFIRM, Patch)
cve@mitre.org (x_refsource_OSVDB, vdb-entry)
cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)