CVE-2009-2187

Name: CVE-2009-2187
Creator: NVD / NIST
Published: 2009-06-25T01:30:01.843+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 0.48%

Last modified Jun 16, 2026

CVE-2009-2187 is a vulnerability of currently unknown severity. Multiple memory leaks in the (1) IP and (2) IPv6 multicast implementation in the kernel in Sun Solaris 10, and OpenSolaris snv_67 through snv_93, allow local users to cause a denial of service (memory consumption) via vectors related to the association of (a) DL_ENABMULTI_REQ and (b) DL_DISABMULTI_REQ messages with ARP messages.. EPSS estimates a 0.48% chance of exploitation in the next 30 days.

Description

Multiple memory leaks in the (1) IP and (2) IPv6 multicast implementation in the kernel in Sun Solaris 10, and OpenSolaris snv_67 through snv_93, allow local users to cause a denial of service (memory consumption) via vectors related to the association of (a) DL_ENABMULTI_REQ and (b) DL_DISABMULTI_REQ messages with ARP messages.

Metrics

EPSS Probability

0.48%

37.8th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-399

Affected Software

Vendor	Product	Versions
Sun	Opensolaris	snv_67
Sun	Opensolaris	snv_68
Sun	Opensolaris	snv_69
Sun	Opensolaris	snv_70
Sun	Opensolaris	snv_71
Sun	Opensolaris	snv_72
Sun	Opensolaris	snv_73
Sun	Opensolaris	snv_74
Sun	Opensolaris	snv_75
Sun	Opensolaris	snv_76
Sun	Opensolaris	snv_77
Sun	Opensolaris	snv_78
Sun	Opensolaris	snv_79
Sun	Opensolaris	snv_80
Sun	Opensolaris	snv_81
Sun	Opensolaris	snv_82
Sun	Opensolaris	snv_83
Sun	Opensolaris	snv_84
Sun	Opensolaris	snv_85
Sun	Opensolaris	snv_86
Sun	Opensolaris	snv_87
Sun	Opensolaris	snv_88
Sun	Opensolaris	snv_89
Sun	Opensolaris	snv_90
Sun	Opensolaris	snv_91
Sun	Opensolaris	snv_92
Sun	Opensolaris	snv_93
Sun	Solaris	10.0

References

http://bugs.opensolaris.org/view_bug.do?bug_id=6709252
http://bugs.opensolaris.org/view_bug.do?bug_id=6731600Exploit
http://secunia.com/advisories/35552Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-21-141414-01-1Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-66-262408-1Patch, Vendor Advisory
http://www.securityfocus.com/bid/35474Patch
http://bugs.opensolaris.org/view_bug.do?bug_id=6709252
http://bugs.opensolaris.org/view_bug.do?bug_id=6731600Exploit
http://secunia.com/advisories/35552Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-21-141414-01-1Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-66-262408-1Patch, Vendor Advisory
http://www.securityfocus.com/bid/35474Patch

Timeline

Published: Jun 25, 2009
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2009-2187?

How severe is CVE-2009-2187?

Severity scoring for CVE-2009-2187 is pending analysis. The EPSS model estimates a 0.48% probability of exploitation in the next 30 days.

How do I fix CVE-2009-2187?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2009-2187?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST