A security vulnerability in the Special File System (SPECFS) strfreectty() function may allow an unprivileged local user to panic the system, creating a Denial of Service (DoS).

This issue can occur in the following releases:

SPARC Platform

• Solaris 8 without patches 109025-07 and 117350-49
• Solaris 9 without patch 122300-11
• Solaris 10 without patch 118822-24

x86 Platform

• Solaris 8 without patches 109026-08 and 117351-49
• Solaris 9 without patch 122301-11
• Solaris 10 without patch 118844-24

The panic stack backtrace will show strfreectty() erroneously passing a NULL pointer to pgsignal().

There is no workaround for this issue. Please see the Resolution section below.

This issue is addressed in the following releases:

SPARC Platform

• Solaris 8 with patches 109025-07 or later and 117350-49 or later
• Solaris 9 with patch 122300-11 or later
• Solaris 10 with patch 118822-24 or later

x86 Platform

• Solaris 8 with patches 109026-08 or later and 117351-49 or later
• Solaris 9 with patch 122301-11 or later
• Solaris 10 with patch 118844-24 or later

This solution has no attachment