VULNERABILITY INTELLIGENCE

CVE-2009-0838

CVSS score4.9 MEDIUM
EPSS probability0.39%
CISA KEVNot currently listed
Published2009-03-06
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:N/I:N/A:C

Description

The crypto pseudo device driver in Sun Solaris 10, and OpenSolaris snv_88 through snv_102, does not properly free memory, which allows local users to cause a denial of service (panic) via unspecified vectors, related to the vmem_hash_delete function.

Primary references