Vulnerability Note VU#967236
Sun Solaris fails to properly process ICMP packets
Sun Solaris fails to properly handle ICMP packets, which may allow a remote, unauthenticated attacker to cause a denial of service.
Sun Solaris 10 contains an unspecified error that can cause a system panic when handling a specially crafted ICMP packet. Note that Solaris 8 and 9 are not affected by this issue.
A remote, unauthenticated attacker may be able to create a denial-of-service condition by causing a system panic on a vulnerable Sun Solaris system.
Apply a patch
This issue is addressed by patch 118833-28 for Solaris 10 on SPARC systems, and patch 118855-28 for Solaris 10 on x86 systems. More details are available in SunSolve Alert 102697.
Systems Affected (Learn More)
|Vendor||Status||Date Notified||Date Updated|
|Sun Microsystems, Inc.||Affected||-||31 Jan 2007|
CVSS Metrics (Learn More)
Thanks to Sun for reporting this vulnerability.
This document was written by Will Dormann.
- CVE IDs: Unknown
- Date Public: 31 Jan 2007
- Date First Published: 31 Jan 2007
- Date Last Updated: 07 Feb 2007
- Severity Metric: 2.41
- Document Revision: 8
If you have feedback, comments, or additional information about this vulnerability, please send us email.