Solaris 2.5.1 through 9 allows local users to cause a denial of service (kernel panic) by setting the sd_struiowrq variable in the struioget function to null, which triggers a null dereference.
| Software | From | Fixed in |
|---|---|---|
| sun / solaris | 2.5.1 | 2.5.1.x |
| sun / sunos | 5.7 | 5.7.x |
| sun / sunos | 5.8 | 5.8.x |
| sun / solaris | 7.0 | 7.0.x |
| sun / solaris | 9.0 | 9.0.x |
| sun / sunos | 5.5.1 | 5.5.1.x |
| sun / solaris | 2.6 | 2.6.x |
| sun / solaris | 8.0 | 8.0.x |