CVE-2009-3000: Sun Opensolaris

High severity, CVSS 7.1. EPSS: 1.6% chance of exploitation in the next 30 days.

The sockfs module in the kernel in Sun Solaris 10 and OpenSolaris snv_41 through snv_122, when Network Cache Accelerator (NCA) logging is enabled, allows remote attackers to cause a denial of service (panic) via unspecified web-server traffic that triggers a NULL pointer dereference in the nl7c_http_log function, related to "improper http response handling."

Affected products

• Sun Opensolaris: version snv_41 only; version snv_42 only; version snv_43 only; version snv_44 only; version snv_45 only; version snv_46 only; …
• Sun Solaris: version 10.0 only

Published 2009-08-28. Last modified 2026-06-16.