CVE-2009-4226

Severity: high (CVSS 7.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-12-08 · updated 2026-06-16
Weakness: CWE-362

Description

Race condition in the IP module in the kernel in Sun OpenSolaris snv_106 through snv_124 allows remote attackers to cause a denial of service (NULL pointer dereference and panic) via unspecified vectors related to the (1) tcp_do_getsockname or (2) tcp_do_getpeername function.

Affected products

Sun Opensolaris: snv_106, snv_107, snv_108, snv_109, snv_110, snv_111 (+13)

References

http://opensolaris.org/jive/thread.jspa?messageID=415069&tstart=0
http://sunsolve.sun.com/search/document.do?assetkey=1-66-268189-1
http://www.vupen.com/english/advisories/2009/3413
https://exchange.xforce.ibmcloud.com/vulnerabilities/54574
http://opensolaris.org/jive/thread.jspa?messageID=415069&tstart=0
http://sunsolve.sun.com/search/document.do?assetkey=1-66-268189-1
http://www.vupen.com/english/advisories/2009/3413
https://exchange.xforce.ibmcloud.com/vulnerabilities/54574

Get alerted when CVE-2009-4226 or the next vulnerability affects your stack