Use-after-free vulnerability in the frpr_icmp function in the ipfilter (aka IP Filter) subsystem in Sun Solaris 10, and OpenSolaris snv_45 through snv_110, allows remote attackers to cause a denial of service (panic) via unspecified vectors.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Opensolaris | Sun | snv_45 (including) | snv_45 (including) |
| Opensolaris | Sun | snv_46 (including) | snv_46 (including) |
| Opensolaris | Sun | snv_47 (including) | snv_47 (including) |
| Opensolaris | Sun | snv_48 (including) | snv_48 (including) |
| Opensolaris | Sun | snv_49 (including) | snv_49 (including) |
| Opensolaris | Sun | snv_50 (including) | snv_50 (including) |
| Opensolaris | Sun | snv_51 (including) | snv_51 (including) |
| Opensolaris | Sun | snv_52 (including) | snv_52 (including) |
| Opensolaris | Sun | snv_53 (including) | snv_53 (including) |
| Opensolaris | Sun | snv_54 (including) | snv_54 (including) |
| Opensolaris | Sun | snv_55 (including) | snv_55 (including) |
| Opensolaris | Sun | snv_56 (including) | snv_56 (including) |
| Opensolaris | Sun | snv_57 (including) | snv_57 (including) |
| Opensolaris | Sun | snv_58 (including) | snv_58 (including) |
| Opensolaris | Sun | snv_59 (including) | snv_59 (including) |
| Opensolaris | Sun | snv_60 (including) | snv_60 (including) |
| Opensolaris | Sun | snv_61 (including) | snv_61 (including) |
| Opensolaris | Sun | snv_62 (including) | snv_62 (including) |
| Opensolaris | Sun | snv_63 (including) | snv_63 (including) |
| Opensolaris | Sun | snv_64 (including) | snv_64 (including) |
| Opensolaris | Sun | snv_65 (including) | snv_65 (including) |
| Opensolaris | Sun | snv_66 (including) | snv_66 (including) |
| Opensolaris | Sun | snv_67 (including) | snv_67 (including) |
| Opensolaris | Sun | snv_68 (including) | snv_68 (including) |
| Opensolaris | Sun | snv_69 (including) | snv_69 (including) |
| Opensolaris | Sun | snv_70 (including) | snv_70 (including) |
| Opensolaris | Sun | snv_71 (including) | snv_71 (including) |
| Opensolaris | Sun | snv_72 (including) | snv_72 (including) |
| Opensolaris | Sun | snv_73 (including) | snv_73 (including) |
| Opensolaris | Sun | snv_74 (including) | snv_74 (including) |
| Opensolaris | Sun | snv_75 (including) | snv_75 (including) |
| Opensolaris | Sun | snv_76 (including) | snv_76 (including) |
| Opensolaris | Sun | snv_77 (including) | snv_77 (including) |
| Opensolaris | Sun | snv_78 (including) | snv_78 (including) |
| Opensolaris | Sun | snv_79 (including) | snv_79 (including) |
| Opensolaris | Sun | snv_80 (including) | snv_80 (including) |
| Opensolaris | Sun | snv_81 (including) | snv_81 (including) |
| Opensolaris | Sun | snv_82 (including) | snv_82 (including) |
| Opensolaris | Sun | snv_83 (including) | snv_83 (including) |
| Opensolaris | Sun | snv_84 (including) | snv_84 (including) |
| Opensolaris | Sun | snv_85 (including) | snv_85 (including) |
| Opensolaris | Sun | snv_86 (including) | snv_86 (including) |
| Opensolaris | Sun | snv_87 (including) | snv_87 (including) |
| Opensolaris | Sun | snv_88 (including) | snv_88 (including) |
| Opensolaris | Sun | snv_89 (including) | snv_89 (including) |
| Opensolaris | Sun | snv_90 (including) | snv_90 (including) |
| Opensolaris | Sun | snv_91 (including) | snv_91 (including) |
| Opensolaris | Sun | snv_92 (including) | snv_92 (including) |
| Opensolaris | Sun | snv_93 (including) | snv_93 (including) |
| Opensolaris | Sun | snv_94 (including) | snv_94 (including) |
| Opensolaris | Sun | snv_95 (including) | snv_95 (including) |
| Opensolaris | Sun | snv_96 (including) | snv_96 (including) |
| Opensolaris | Sun | snv_97 (including) | snv_97 (including) |
| Opensolaris | Sun | snv_98 (including) | snv_98 (including) |
| Opensolaris | Sun | snv_99 (including) | snv_99 (including) |
| Opensolaris | Sun | snv_100 (including) | snv_100 (including) |
| Opensolaris | Sun | snv_101 (including) | snv_101 (including) |
| Opensolaris | Sun | snv_102 (including) | snv_102 (including) |
| Opensolaris | Sun | snv_103 (including) | snv_103 (including) |
| Opensolaris | Sun | snv_104 (including) | snv_104 (including) |
| Opensolaris | Sun | snv_105 (including) | snv_105 (including) |
| Opensolaris | Sun | snv_106 (including) | snv_106 (including) |
| Opensolaris | Sun | snv_107 (including) | snv_107 (including) |
| Opensolaris | Sun | snv_108 (including) | snv_108 (including) |
| Opensolaris | Sun | snv_109 (including) | snv_109 (including) |
| Opensolaris | Sun | snv_110 (including) | snv_110 (including) |
| Solaris | Sun | 10 (including) | 10 (including) |
References
- http://osvdb.org/55874
- http://secunia.com/advisories/35881
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-141020-01-1
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-260951-1
- http://www.vupen.com/english/advisories/2009/1923
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51739
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6361
- http://osvdb.org/55874
- http://secunia.com/advisories/35881
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-141020-01-1
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-260951-1
- http://www.vupen.com/english/advisories/2009/1923
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51739
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6361