Medium severity5.5NVD Advisory· Published Aug 19, 2009· Updated Jun 16, 2026

CVE-2009-2857

Description

The kernel in Sun Solaris 8, 9, and 10, and OpenSolaris before snv_103, does not properly handle interaction between the filesystem and virtual-memory implementations, which allows local users to cause a denial of service (deadlock and system halt) via vectors involving mmap and write operations on the same file.

Affected products

Oracle Corporation/Opensolaris
cpe:2.3:o:oracle:opensolaris:*:*:*:*:*:*:*:*
Range: <snv_103
Oracle Corporation/Solaris3 versions
cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*
- cpe:2.3:o:oracle:solaris:8:*:*:*:*:*:*:*
- cpe:2.3:o:oracle:solaris:9:*:*:*:*:*:*:*
Sun Corporation/Solarisllm-fuzzy
Range: Solaris 8, 9, and 10, and OpenSolaris before snv_103

Patches

Vulnerability mechanics

References

sunsolve.sun.com/search/document.donvdBroken LinkPatch
sunsolve.sun.com/search/document.donvdBroken LinkPatchVendor Advisory
secunia.com/advisories/36319nvdBroken LinkVendor Advisory
www.vupen.com/english/advisories/2009/2291nvdBroken LinkVendor Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6152nvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000