CVE:CVE-2009-2137
CNNVD:CNNVD-200906-333
Solaris是一款由Sun开发和维护的商业UNIX操作系统。
Solaris的Ultra-SPARC T2加密提供程序设备驱动(n2cp(7D))中存在内存泄漏，本地或远程非特权用户可以通过很大的keylen值导致耗尽系统内存资源。
如果出现了上述漏洞，内核内存分配可能增加(可使用mdb(1)等内核调试器检查)，控制台可能显示类似于以下的消息：
n2cp: [ID 504468 kern.warning] WARNING: alloc_hmac_ctx: keylen(512) > maxlen(32)
solution:Upgrade sun opensolaris to a higher version than snv_54,snv_55,snv_56,snv_57,snv_58,snv_59,snv_60,snv_61,snv_62,snv_63,snv_64,snv_65,snv_66,snv_67,snv_68,snv_69,snv_70,snv_71,snv_72,snv_73,snv_74,snv_75,snv_76,snv_77,snv_78,snv_79,snv_80,snv_81,snv_82,snv_83,snv_84,snv_85,snv_86,snv_87,snv_88,snv_89,snv_90,snv_91,snv_92,snv_93,snv_94,snv_95,snv_96,snv_97,snv_98,snv_99,snv_100,snv_101,snv_102,snv_103,snv_104,snv_105,snv_106,snv_107,snv_108,snv_109,snv_110,snv_111,snv_112,and avoid the version snv_54,snv_55,snv_56,snv_57,snv_58,snv_59,snv_60,snv_61,snv_62,snv_63,snv_64,snv_65,snv_66,snv_67,snv_68,snv_69,snv_70,snv_71,snv_72,snv_73,snv_74,snv_75,snv_76,snv_77,snv_78,snv_79,snv_80,snv_81,snv_82,snv_83,snv_84,snv_85,snv_86,snv_87,snv_88,snv_89,snv_90,snv_91,snv_92,snv_93,snv_94,snv_95,snv_96,snv_97,snv_98,snv_99,snv_100,snv_101,snv_102,snv_103,snv_104,snv_105,snv_106,snv_107,snv_108,snv_109,snv_110,snv_111,snv_112; Upgrade sun solaris to a higher version than 10,and avoid the version 10