Description
The IP implementation in Sun Solaris 8 through 10, and OpenSolaris before snv_82, uses an improper arena when allocating minor numbers for sockets, which allows local users to cause a denial of service (32-bit application failure and login outage) by opening a large number of sockets.
References
- [onnv-notify] 20081011 6507173 Sockets should allocate minor numbers from higher order arena mailing-list
- http://support.avaya.com/elmodocs2/security/ASA-2009-042.htm
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-116965-34-1
- 248026 vendor-advisory
- 33550 vdb-entry
- ADV-2009-0364 vdb-entry
- oval:org.mitre.oval:def:6038 vdb-entry signature
- 33751 third-party-advisory
- 1021653 vdb-entry