CVE-2009-2644 — Race condition in the Solaris Auditing subsystem in Sun Solaris 9 and 10 and OpenSolaris before snv_121, when extended file attributes are used, allows local users to cause a denial of service (panic) via vectors related to "pathnames for invalid fds."

Back Back to CVE browser

MEDIUM

Race condition in the Solaris Auditing subsystem in Sun Solaris 9 and 10 and OpenSolaris before snv_121, when extended file attributes are used, allows local users to cause a denial of service (panic) via vectors related to "pathnames for invalid fds."

Published Jul 29, 2009

4.9

MEDIUM

CVSS 2.0

EPSS 0.27%

Description

Race condition in the Solaris Auditing subsystem in Sun Solaris 9 and 10 and OpenSolaris before snv_121, when extended file attributes are used, allows local users to cause a denial of service (panic) via vectors related to "pathnames for invalid fds."

Affected products

Remediation

No remediation recorded yet.

Metrics

0.27% 0.00269

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 2, 2026.

EPSS probability 0.00269

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (10 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 2, 2026	0.27% (0.00269)	17.31th	v5 (v2026.06.15)
Jun 15, 2026	0.27% (0.00269)	18.27th	v5 (v2026.06.15)
Mar 17, 2025	0.05% (0.00048)	11.95th	v4 (v2025.03.14)
Dec 12, 2024	0.04% (0.00044)	15.20th	v3 (v2023.03.01)
Jun 4, 2024	0.04% (0.00044)	13.00th	v3 (v2023.03.01)
Mar 7, 2023	0.04% (0.00044)	10.97th	v3 (v2023.03.01)
Mar 6, 2023	1.03% (0.01034)	41.69th	v2 (v2022.01.01)
Sep 10, 2022	1.03% (0.01034)	39.91th	v2 (v2022.01.01)
Apr 1, 2022	1.03% (0.01034)	37.91th	v2 (v2022.01.01)
Feb 4, 2022	1.03% (0.01034)	20.32th	v2 (v2022.01.01)

Weaknesses (1)

CWE-362

Race Condition

References (7)

http://secunia.com/advisories/36042
third-party-advisoryx_refsource_SECUNIA
http://sunsolve.sun.com/search/document.do?assetkey=1-21-122300-42-1
x_refsource_CONFIRMPatch
http://sunsolve.sun.com/search/document.do?assetkey=1-66-264429-1
vendor-advisoryx_refsource_SUNALERTPatchVendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020766.1-1
vendor-advisoryx_refsource_SUNALERT
http://www.securityfocus.com/bid/35835
vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2009/2022
vdb-entryx_refsource_VUPEN
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6168
vdb-entrysignaturex_refsource_OVAL

Link	Providers	Tags
http://secunia.com/advisories/36042		third-party-advisoryx_refsource_SECUNIA
http://sunsolve.sun.com/search/document.do?assetkey=1-21-122300-42-1		x_refsource_CONFIRMPatch
http://sunsolve.sun.com/search/document.do?assetkey=1-66-264429-1		vendor-advisoryx_refsource_SUNALERTPatchVendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020766.1-1		vendor-advisoryx_refsource_SUNALERT
http://www.securityfocus.com/bid/35835		vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2009/2022		vdb-entryx_refsource_VUPEN
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6168		vdb-entrysignaturex_refsource_OVAL

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jul 29, 2009

Updated Aug 7, 2024

Reserved Jul 29, 2009

Link CVE-2009-2644

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2009-2644

Red Hat

Severity n/a

Public date n/a

Links CVE-2009-2644