Description
Solaris 2.5.1 through 9 allows local users to cause a denial of service (kernel panic) by setting the sd_struiowrq variable in the struioget function to null, which triggers a null dereference.
References
- solaris-null-pointer-dos(10769) vdb-entry
- 1005742 vdb-entry
- 6309 vdb-entry
- 48267 vendor-advisory