CVE-2009-0838: sun opensolaris Resource Management Errors

EPSS trend

Probability

0.39%

Chance of exploitation in the next 30 days

Percentile

32%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.39% on 22-09-2026

22-09-202622-10-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

References

11 links

sunsolve.sun.com/search/document.do?assetkey=1-21-139498-04-1X Refsource CONFIRMPatchVendor Advisory
securitytracker.com/id?1021810VDB EntryX Refsource SECTRACK
www.securityfocus.com/bid/34000VDB EntryX Refsource BID
www.vupen.com/english/advisories/2009/0606VDB EntryX Refsource VUPENVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/49105VDB EntryX Refsource XF
support.avaya.com/elmodocs2/security/ASA-2009-097.htmX Refsource CONFIRM
www.vupen.com/english/advisories/2009/0815VDB EntryX Refsource VUPEN
sunsolve.sun.com/search/document.do?assetkey=1-66-254088-1Vendor AdvisoryX Refsource SUNALERTPatch
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5641VDB EntrySignatureX Refsource OVAL
secunia.com/advisories/34149Third Party AdvisoryX Refsource SECUNIAVendor Advisory

Show all 11 references

secunia.com/advisories/34455Third Party AdvisoryX Refsource SECUNIA

Related vulnerabilities

HighCVE-2008-2710sun · opensolaris +2 more18y agosun opensolarisInteger signedness error in the ip_set_srcfilter function in the IP Multicast Filter in uts/common/inet/ip/ip_multi.c in the kernel in Sun Solaris 10 and OpenSolaris before snv_92 allows local users to execute arbitrary code in other Solaris Zones via an SIOCSIPMSFILTER IOCTL request with a large value of the imsf->imsf_numsrc field, which triggers an out-of-bounds write of kernel memory. NOTE: this was reported as an integer overflow, but the root cause involves the bypass of a signed comparison.EPSS0.59%MediumCVE-2008-2708sun · opensolaris +1 more18y agosun opensolarisUnspecified vulnerability in the Sun (1) UltraSPARC T2 and (2) UltraSPARC T2+ kernel modules in Sun Solaris 10, and OpenSolaris before snv_93, allows local users to cause a denial of service (panic) via unspecified vectors, probably related to core files.EPSS0.34%CriticalCVE-2008-0965sun · opensolaris +2 more18y agosun opensolarisMultiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o option is omitted, allow remote attackers to execute arbitrary code via format string specifiers in an SMB packet.EPSS5.70%CriticalCVE-2008-0964sun · opensolaris +2 more18y agosun opensolarisMultiple stack-based buffer overflows in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o option is omitted, allow remote attackers to execute arbitrary code via a crafted SMB packet.EPSS13.51%HighCVE-2008-7300sun · opensolaris +1 more15y agosun opensolarisThe labeled networking implementation in Solaris Trusted Extensions in Sun Solaris 10 and OpenSolaris snv_39 through snv_67, when a labeled zone is in the installed state, allows remote authenticated users to bypass a Mandatory Access Control (MAC) policy and obtain access to the global zone.EPSS1.50%MediumCVE-2008-5684sun · opensolaris +1 more17y agosun opensolarisUnspecified vulnerability in the X Inter Client Exchange library (aka libICE) in Sun Solaris 8 through 10 and OpenSolaris before snv_85 allows context-dependent attackers to cause a denial of service (application crash), as demonstrated by a port scan that triggers a segmentation violation in the Gnome session manager (aka gnome-session).EPSS2.39%

All vulnerabilities inopensolaris sunos

CVE-2009-0838: sun opensolaris Resource Management Errors

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References