Note: This is an archival copy of Security Sun Alert 275910 as previously published on http://sunsolve.sun.com.
Latest version of this security advisory is available from http://support.oracle.com as Sun Alert 1021799.1.
Article ID : 1021799.1
Article Type : Sun Alerts (SURE)
Last reviewed : 2010-05-21
Audience : PUBLIC
Copyright Notice: Copyright © 2010, Oracle Corporation and/or its affiliates.

This Alert Covers CVE-2010-0453 for the /dev/ucode Component of the Solaris and OpenSolaris Products.

Category
Security

Release Phase
Resolved

Bug Id
6905530

Product
Solaris 10 Operating System
OpenSolaris

Date of Resolved Release
12-Apr-2010

.

1. Impact

This Alert covers CVE-2010-0453 for the /dev/ucode component of the Solaris and OpenSolaris products.

CVE-2010-0453 can be found at http://cve.mitre.org/cgi-bin/cvename.cgi?name=2010-0453

Please see http://www.oracle.com/technology/deploy/security/alerts.htm for more information about Critical Patch Updates and Security Alerts. This publication relates to the CPU for April 2010.

2. Contributing Factors

This issue can occur in the following releases:

x86 Platform
  • Solaris 10 with patch 127128-11 and without patch 143913-01
  • OpenSolaris based upon builds snv_69 through snv_133
Note: Solaris 8 and 9, and Solaris 10 on the SPARC platform are not impacted by this issue.

3. Symptoms


4. Workaround


5. Resolution

This issue is addressed in the following releases:

x86 Platform
  • Solaris 10 with patch 143913-01 or later
  • OpenSolaris based upon builds snv_134 or later
 

References

143913-01





Attachments
This solution has no attachment