CVE-2008-1095: Sun Solaris

Medium severity, CVSS 6.8. EPSS: 2.3% chance of exploitation in the next 30 days.

Unspecified vulnerability in the Internet Protocol (IP) implementation in Sun Solaris 8, 9, and 10 allows remote attackers to bypass intended firewall policies or cause a denial of service (panic) via unknown vectors, possibly related to ICMP packets and IP fragment reassembly.

Affected products

• Sun Solaris: version 8 only; version 9 only; version 10 only
• Sun Sunos: version 5.8 only; version 5.9 only; version 5.10 only

Published 2008-02-29. Last modified 2026-06-16.