CVE-2009-0346

CVE-2009-0346 describes a denial-of-service vulnerability in the IP-in-IP packet processing implementation within the IPsec and IP stacks of Sun Solaris 9 and 10, and OpenSolaris versions snv_01 through snv_85. A local attacker can trigger a system panic by sending a self-encapsulated packet lacking IPsec protection. With a CVSS score of 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C), this vulnerability is of medium severity, requiring local access and low attack complexity to achieve a complete denial of service. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage, indicating a low current threat profile.