CVE-2009-2187: Sun Opensolaris

Medium severity, CVSS 4.9. EPSS: 0.5% chance of exploitation in the next 30 days.

Multiple memory leaks in the (1) IP and (2) IPv6 multicast implementation in the kernel in Sun Solaris 10, and OpenSolaris snv_67 through snv_93, allow local users to cause a denial of service (memory consumption) via vectors related to the association of (a) DL_ENABMULTI_REQ and (b) DL_DISABMULTI_REQ messages with ARP messages.

Affected products

• Sun Opensolaris: version snv_67 only; version snv_68 only; version snv_69 only; version snv_70 only; version snv_71 only; version snv_72 only; …
• Sun Solaris: version 10.0 only

Published 2009-06-25. Last modified 2026-06-16.