PT-2009-2970
CVE-2009-0304
·
Published
2009-01-27
·
Updated
2017-09-29
Description by
CVSS 2.0
7.8
HighMetricsAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
Sun Solaris versions 10 and 11 snv 101b
OpenSolaris versions prior to snv 108
Description
The issue allows remote attackers to cause a denial of service, resulting in a system crash, by sending a crafted IPv6 packet. This is related to insufficient validation.
Recommendations
For Sun Solaris versions 10 and 11 snv 101b, consider restricting access to IPv6 packets until a fix is available.
For OpenSolaris versions prior to snv 108, avoid using IPv6 functionality until the issue is resolved.
As a temporary workaround, consider disabling IPv6 support to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾