CVE-2009-2857

MediumCVSS 5.5/10Last modified Jun 16, 2026

Description

The kernel in Sun Solaris 8, 9, and 10, and OpenSolaris before snv_103, does not properly handle interaction between the filesystem and virtual-memory implementations, which allows local users to cause a denial of service (deadlock and system halt) via vectors involving mmap and write operations on the same file.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-667

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/36319Broken Link, Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-21-127721-02-1Broken Link, Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-66-257848-1Broken Link, Patch, Vendor Advisory
http://www.vupen.com/english/advisories/2009/2291Broken Link, Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6152Broken Link
http://secunia.com/advisories/36319Broken Link, Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-21-127721-02-1Broken Link, Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-66-257848-1Broken Link, Patch, Vendor Advisory
http://www.vupen.com/english/advisories/2009/2291Broken Link, Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6152Broken Link

Timeline

Published: Aug 19, 2009
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2009

CVE-2009-28585.0Memory leak in the Security component in IBM DB2 8.1 before FP18 on Unix platforms allows attackers to cause a denial of service (memory con CVE-2009-28594.6IBM DB2 8.1 before FP18 allows attackers to obtain unspecified access via a das command.CVE-2009-28605.0Unspecified vulnerability in db2jds in IBM DB2 8.1 before FP18 allows remote attackers to cause a denial of service (service crash) via "mal CVE-2009-28617.3The Over-the-Air Provisioning (OTAP) functionality on Cisco Aironet Lightweight Access Point 1100 and 1200 devices does not properly impleme CVE-2009-28624.3The Object Groups for Access Control Lists (ACLs) feature in Cisco IOS 12.2XNB, 12.2XNC, 12.2XND, 12.4MD, 12.4T, 12.4XZ, and 12.4YA allows r CVE-2009-28637.1Race condition in the Firewall Authentication Proxy feature in Cisco IOS 12.0 through 12.4 allows remote attackers to bypass authentication,CVE-2009-28647.8Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 5.x before 5.1(3g), 6.x before 6.1(4), 7.0.x before 7.0(2a)su1, and 7.CVE-2009-28657.6Buffer overflow in the login implementation in the Extension Mobility feature in the Unified Communications Manager Express (CME) component CVE-2009-28667.8Unspecified vulnerability in Cisco IOS 12.2 through 12.4 allows remote attackers to cause a denial of service (device reload) via a crafted CVE-2009-28677.8Unspecified vulnerability in Cisco IOS 12.2XNA, 12.2XNB, 12.2XNC, 12.2XND, 12.4T, 12.4XZ, and 12.4YA, when Zone-Based Policy Firewall SIP In CVE-2009-28687.8Unspecified vulnerability in Cisco IOS 12.2 through 12.4, when certificate-based authentication is enabled for IKE, allows remote attackers CVE-2009-28697.8Unspecified vulnerability in Cisco IOS 12.2XNA, 12.2XNB, 12.2XNC, 12.2XND, 12.4MD, 12.4T, 12.4XZ, and 12.4YA allows remote attackers to caus