CVE-2009-0838 Information

Description

The crypto pseudo device driver in Sun Solaris 10 and OpenSolaris snv_88 through snv_102 does not properly free memory which allows local users to cause a denial of service (panic) via unspecified vectors related to the vmem_hash_delete function.

Reference

http://secunia.com/advisories/34149 http://secunia.com/advisories/34455 http://securitytracker.com/id?1021810 http://sunsolve.sun.com/search/document.do?assetkey=1-21-139498-04-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-254088-1 http://support.avaya.com/elmodocs2/security/ASA-2009-097.htm http://www.securityfocus.com/bid/34000 http://www.vupen.com/english/advisories/2009/0606 http://www.vupen.com/english/advisories/2009/0815 https://exchange.xforce.ibmcloud.com/vulnerabilities/49105 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A5641