Vulnerability Details : CVE-2009-3899
Memory leak in the Sockets Direct Protocol (SDP) driver in Sun Solaris 10, and OpenSolaris snv_57 through snv_94, allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.
Vulnerability category: Denial of service
Products affected by CVE-2009-3899
- cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2009-3899
1.78%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 88 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2009-3899
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
7.8
|
HIGH | AV:N/AC:L/Au:N/C:N/I:N/A:C |
10.0
|
6.9
|
NIST |
CWE ids for CVE-2009-3899
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2009-3899
-
http://www.securityfocus.com/bid/36904
Patch
-
http://securitytracker.com/id?1023124
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6563
-
http://www.vupen.com/english/advisories/2009/3130
Vendor Advisory
-
http://sunsolve.sun.com/search/document.do?assetkey=1-21-141444-09-1
Patch
-
http://sunsolve.sun.com/search/document.do?assetkey=1-66-264730-1
Vendor Advisory
Jump to