Read the docs
TI-2009-02044 Aliases CVE-2009-2137GHSA-62hf-v7wh-mw79

Memory leak in the Ultra-SPARC T2 crypto provider device driver (aka n2cp) in Sun Solaris…

Priority LOW 38CWE-399Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · Complete
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-399 and the CVSS impact.

Summary

Memory leak in the Ultra-SPARC T2 crypto provider device driver (aka n2cp) in Sun Solaris 10, and OpenSolaris snv_54 through snv_112, allows context-dependent attackers to cause a denial of service (memory consumption) via unspecified vectors related to a large keylen value.

Why it matters now

EPSS 0.01816 78th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 60

CPEVersionsRoleVendor
cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*snv_54VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*snv_55VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*snv_56VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*snv_57VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*snv_58VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*snv_59VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*snv_60VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*snv_61VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*snv_62VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*snv_63VulnerableSun
  • cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:* Versions snv_54 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:* Versions snv_55 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:* Versions snv_56 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:* Versions snv_57 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:* Versions snv_58 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:* Versions snv_59 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:* Versions snv_60 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:* Versions snv_61 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:* Versions snv_62 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:* Versions snv_63 Vulnerable ·Sun
Show 50 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*snv_64VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*snv_65VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*snv_66VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*snv_67VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*snv_68VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*snv_69VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*snv_70VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*snv_71VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*snv_72VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*snv_73VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*snv_74VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*snv_75VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*snv_76VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*snv_77VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*snv_78VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*snv_79VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*snv_80VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*snv_81VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*snv_82VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*snv_83VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*snv_84VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*snv_85VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*snv_86VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*snv_87VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*snv_88VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*snv_89VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*snv_90VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*snv_91VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*snv_92VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*snv_93VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*snv_94VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*snv_95VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*snv_96VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*snv_97VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*snv_98VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*snv_99VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*snv_100VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*snv_101VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*snv_102VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*snv_103VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*snv_104VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*snv_105VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*snv_106VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*snv_107VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*snv_108VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*snv_109VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*snv_110VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_111:*:sparc:*:*:*:*:*snv_111VulnerableSun
cpe:2.3:o:sun:opensolaris:snv_112:*:sparc:*:*:*:*:*snv_112VulnerableSun
cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*10VulnerableSun
  • cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:* Versions snv_64 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:* Versions snv_65 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:* Versions snv_66 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:* Versions snv_67 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:* Versions snv_68 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:* Versions snv_69 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:* Versions snv_70 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:* Versions snv_71 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:* Versions snv_72 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:* Versions snv_73 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:* Versions snv_74 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:* Versions snv_75 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:* Versions snv_76 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:* Versions snv_77 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:* Versions snv_78 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:* Versions snv_79 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:* Versions snv_80 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:* Versions snv_81 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:* Versions snv_82 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:* Versions snv_83 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:* Versions snv_84 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:* Versions snv_85 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:* Versions snv_86 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:* Versions snv_87 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:* Versions snv_88 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:* Versions snv_89 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:* Versions snv_90 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:* Versions snv_91 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:* Versions snv_92 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:* Versions snv_93 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:* Versions snv_94 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:* Versions snv_95 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:* Versions snv_96 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:* Versions snv_97 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:* Versions snv_98 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:* Versions snv_99 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:* Versions snv_100 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:* Versions snv_101 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:* Versions snv_102 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:* Versions snv_103 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:* Versions snv_104 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:* Versions snv_105 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:* Versions snv_106 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:* Versions snv_107 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:* Versions snv_108 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:* Versions snv_109 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:* Versions snv_110 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_111:*:sparc:*:*:*:*:* Versions snv_111 Vulnerable ·Sun
  • cpe:2.3:o:sun:opensolaris:snv_112:*:sparc:*:*:*:*:* Versions snv_112 Vulnerable ·Sun
  • cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:* Versions 10 Vulnerable ·Sun

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2009-2137
  2. 2026-10-03 Alias added: GHSA-62hf-v7wh-mw79

References

Patch 2

Other 1

  • TI-2007-05153 Stack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD… CVSS 2.0HIGH 7.2
  • TI-2008-00925 Multiple stack-based buffer overflows in snoop on Sun Solaris 8 through 10 and… CVSS 2.0HIGH 9.3
  • TI-2016-01184 Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network… CVSS 3.0CRITICAL 9.8
  • TI-2008-04764 in.dhcpd in the DHCP implementation in Sun Solaris 8 through 10, and OpenSolaris before… CVSS 2.0HIGH 10.0
  • TI-2009-02188 The NFSv4 server kernel module in Sun Solaris 10, and OpenSolaris before snv_119, does… CVSS 2.0HIGH 10.0
  • TI-2008-00926 Multiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and… CVSS 2.0HIGH 9.3
See all 112 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences