Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
4.7

Solaris/OpenSolaris keysock module can crash system

CVE-2009-0913 · published 17 years ago
Summary

The keysock component in Solaris 10 and OpenSolaris builds snv_01 through snv_108 can be triggered by a local user to make the server stop working and restart unexpectedly. This causes a denial of service, meaning the machine becomes unavailable until it is rebooted. Apply the latest security updates from Sun/Oracle or upgrade to a newer build to protect your systems.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
sun opensolaris <= snv_108
snv_01
snv_02
snv_03
snv_04
snv_05
snv_06
snv_07
snv_08
snv_09
snv_10
snv_11
96 more version ranges
cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*
sun solaris 10
cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*
Original advisory text
Unspecified vulnerability in the keysock kernel module in Solaris 10 and OpenSolaris builds snv_01 through snv_108 allows local users to cause a denial of service (system panic) via unknown vectors...
Unspecified vulnerability in the keysock kernel module in Solaris 10 and OpenSolaris builds snv_01 through snv_108 allows local users to cause a denial of service (system panic) via unknown vectors related to PF_KEY socket, probably related to setting socket options.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
4.7 Medium
Exploitation
<1% chance of attack within 30 days
Timeline
Published16 Mar 2009
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2009-0913 · NVD
Track software like this
Free during beta