VULNERABILITY INTELLIGENCE

CVE-2009-0346

CVSS score4.9 NONE
EPSS probability0.34%
CISA KEVNot currently listed
Published2009-01-29
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:N/I:N/A:C

Description

The IP-in-IP packet processing implementation in the IPsec and IP stacks in the kernel in Sun Solaris 9 and 10, and OpenSolaris snv_01 though snv_85, allows local users to cause a denial of service (panic) via a self-encapsulated packet that lacks IPsec protection.

Weakness classification

  • nvd@nist.gov: CWE-310

Primary references