← Database

CVE-2008-5689

HIGH CVSS: 7.2 Published: 2008-12-19 Modified: 2026-06-16

Description

tun in IP Tunnel in Solaris 10 and OpenSolaris snv_01 through snv_76 allows local users to cause a denial of service (panic) and possibly execute arbitrary code via a crafted SIOCGTUNPARAM IOCTL request, which triggers a NULL pointer dereference.

Affected Platforms

Sun SolarisSun Opensolaris

Weakness Type

CWE-399

References