CVE-2007-5132

Published: Sep 27, 2007Modified: Apr 23, 2026

4.9

Vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 3.9 / Impact: 6.9

Source: NVD

Description

Race condition in the kernel in Sun Solaris 8 through 10 allows local users to cause a denial of service (panic) via unspecified vectors related to "the handling of thread contexts."

Affected (6)

Products: Sun: Solaris

Sun

1 product

Solaris

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Sun Solaris	Version 10.0
Sun Solaris	Version 10.0
Sun Solaris	Version 8.0
Sun Solaris	Version 8.0
Sun Solaris	Version 9.0
Sun Solaris	Version 9.0

Related CWEs

CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

References (20)

http://osvdb.org/37712

Source: cve@mitre.org

http://secunia.com/advisories/26950

Source: cve@mitre.org

http://secunia.com/advisories/27059

Source: cve@mitre.org

http://sunsolve.sun.com/search/document.do?assetkey=1-26-103084-1

Source: cve@mitre.org

Patch

http://support.avaya.com/elmodocs2/security/ASA-2007-403.htm

Source: cve@mitre.org

http://www.securityfocus.com/bid/25821

Source: cve@mitre.org

Patch

http://www.securitytracker.com/id?1018744

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/3274

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/36793

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2214

Source: cve@mitre.org

http://osvdb.org/37712