CVE-2009-3519: Multiple memory leaks in the IP module in the kernel in Sun Solaris 8 through 10, and OpenSolaris before sn...

Security readout for executives and security teams

This is a local denial-of-service issue in older Solaris systems. A user with access to the machine could trigger memory leaks in the kernel IP module, consuming memory and potentially degrading or stopping service. The sources do not show remote exploitation or active exploitation. Exposure is mainly legacy Solaris 8, 9, or 10 systems and OpenSolaris builds before snv_109, especially multi-user hosts where local shell access is granted to users, contractors, applications, or service accounts. Treat this as a legacy-platform availability risk. It is not evidenced as internet-remote or actively exploited, but affected shared Solaris servers could be disrupted by any local user. Prioritize remediation where those systems support critical services. Mitigation focus: Identify Solaris 8, 9, 10, and OpenSolaris hosts before snv_109.; Check Oracle/Sun historical advisory and patch guidance for the referenced fix path.; Restrict local shell access to trusted users on affected systems..

Prepared

Jun 28, 2026, 18:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.