Description
Integer overflow in the aio_suspend function in Sun Solaris 8 through 10 and OpenSolaris, when 32-bit mode is enabled, allows local users to cause a denial of service (panic) via a large integer value in the second argument (aka nent argument).
References
- 1021553 vdb-entry
- 247986 vendor-advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-117350-59-1
- 33188 vdb-entry
- http://www.trapkit.de/advisories/TKADV2009-001.txt
- ADV-2009-0099 vdb-entry
- 33516 third-party-advisory