TI-2009-03357 Aliases CVE-2009-3519 GHSA-jq5g-93fw-pqwp

Multiple memory leaks in the IP module in the kernel in Sun Solaris 8 through 10, and…

LOW 23CWE-772Published 2009-10-01 · Updated 2024-09-16

Key facts

Attack vector: Local
Privileges required: None
User interaction: — Not recorded in CVSS 2.0
Attack complexity: Low
Impact type: Denial of service
Confidentiality · integrity · availability: None · None · Complete
Fix status: No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-772.

Summary

Multiple memory leaks in the IP module in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv_109, allow local users to cause a denial of service (memory consumption) via vectors related to (1) M_DATA, (2) M_PROTO, (3) M_PCPROTO, and (4) M_SIG STREAMS messages.

Why it matters now

EPSS 0.00388 33rd percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 4

CPE	Versions	Role	Vendor
cpe:2.3:o:oracle:opensolaris::::::::	before snv_109	Vulnerable	Oracle
cpe:2.3:o:oracle:solaris:8:::::::*	8	Vulnerable	Oracle
cpe:2.3:o:oracle:solaris:9:::::::*	9	Vulnerable	Oracle
cpe:2.3:o:oracle:solaris:10:::::::*	10	Vulnerable	Oracle

cpe:2.3:o:oracle:opensolaris:*:*:*:*:*:*:*:* Versions before snv_109 Vulnerable ·Oracle
cpe:2.3:o:oracle:solaris:8:*:*:*:*:*:*:* Versions 8 Vulnerable ·Oracle
cpe:2.3:o:oracle:solaris:9:*:*:*:*:*:*:* Versions 9 Vulnerable ·Oracle
cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:* Versions 10 Vulnerable ·Oracle

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2009-3519
2026-10-03 Alias added: GHSA-jq5g-93fw-pqwp

References

Patch 2

TI-2010-03407 Unspecified vulnerability in Oracle OpenSolaris allows remote attackers to affect… CVSS 2.0HIGH 9.0
TI-2010-00082 Unspecified vulnerability in Oracle OpenSolaris 8, 9, and 10 allows remote attackers to… CVSS 2.0HIGH 7.6
TI-2010-03406 Unspecified vulnerability in Oracle OpenSolaris allows remote attackers to affect… CVSS 2.0MEDIUM 6.4
TI-2010-00843 Unspecified vulnerability in the Solaris component in Oracle Sun Product Suite 10 and… CVSS 2.0HIGH 7.2
TI-2010-03333 Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to… CVSS 2.0MEDIUM 6.3
TI-2010-00877 Unspecified vulnerability in Oracle OpenSolaris 10 allows local users to affect… CVSS 2.0MEDIUM 6.2

See all 26 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences