CVE-2009-2487: Use-after-free vulnerability in the frpr_icmp function in the ipfilter (aka IP Filter) subsystem in Sun Sol...

Security readout for executives and security teams

This is a legacy Solaris networking flaw that can let a remote attacker crash an affected system. The documented impact is denial of service through a kernel panic, not data theft or code execution. Business urgency depends on whether any Solaris 10 or affected OpenSolaris systems remain in use and reachable. Exposure is most likely in legacy environments still running Solaris 10 or OpenSolaris snv_45 through snv_110, especially where IP Filter processes network traffic from untrusted networks. The sources do not identify affected package levels, required configuration, or whether all installations are exposed. Prioritize discovery first. If affected legacy Solaris systems are externally reachable or support critical operations, treat remediation as near-term operational risk reduction. If no affected systems remain, document non-exposure and close with evidence. Mitigation focus: Identify Solaris 10 and OpenSolaris snv_45 through snv_110 assets.; Check Sun/Oracle guidance for the referenced advisory and patch applicability.; Prioritize remediation for internet-facing or untrusted-network Solaris systems..

Prepared

Jun 28, 2026, 10:26 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.