CVE-2009-3937

Severity: medium (CVSS 4.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-11-13 · updated 2026-06-16
Weakness: CWE-399

Description

Memory leak in Solaris TCP sockets in Sun OpenSolaris snv_106 through snv_126 allows local users to cause a denial of service (kernel memory consumption) via unspecified vectors involving tcp_sendmsg processing "ancillary data."

Affected products

Sun Opensolaris: snv_106, snv_107, snv_108, snv_109, snv_110, snv_111 (+15)

References

http://sunsolve.sun.com/search/document.do?assetkey=1-66-266488-1
http://sunsolve.sun.com/search/document.do?assetkey=1-68-nv_osol0906u5-1
http://www.securityfocus.com/bid/36992
http://www.securitytracker.com/id?1023162
http://www.vupen.com/english/advisories/2009/3213
http://sunsolve.sun.com/search/document.do?assetkey=1-66-266488-1
http://sunsolve.sun.com/search/document.do?assetkey=1-68-nv_osol0906u5-1
http://www.securityfocus.com/bid/36992
http://www.securitytracker.com/id?1023162
http://www.vupen.com/english/advisories/2009/3213

Get alerted when CVE-2009-3937 or the next vulnerability affects your stack