CVE-2010-0453

CVE-2010-0453 is a medium-severity vulnerability in Sun Opensolaris with a CVSS 2.0 base score of 4.9. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-20.

Key facts

• Severity: Medium (CVSS 2.0 base score 4.9)
• EPSS exploit prediction: 1% (53rd percentile)
• Actively exploited: Not listed in CISA KEV
• Weakness: CWE-20
• Affected product: Sun Opensolaris
• Published: 2010-02-03
• Last modified: 2026-06-16

Description

The ucode_ioctl function in intel/io/ucode_drv.c in Sun Solaris 10 and OpenSolaris snv_69 through snv_133, when running on x86 architectures, allows local users to cause a denial of service (panic) via a request with a 0 size value to the UCODE_GET_VERSION IOCTL, which triggers a NULL pointer dereference in the ucode_get_rev function, related to retrieval of the microcode revision.

Frequently asked questions

What is CVE-2010-0453?

The ucode_ioctl function in intel/io/ucode_drv.c in Sun Solaris 10 and OpenSolaris snv_69 through snv_133, when running on x86 architectures, allows local users to cause a denial of service (panic) via a request with a 0 size value to the UCODE_GET_VERSION IOCTL, which triggers a NULL pointer dereference in the ucode_get_rev function, related to retrieval of the microcode revision.

How severe is CVE-2010-0453?

CVE-2010-0453 has a CVSS 2.0 base score of 4.9, rated medium severity.

Is CVE-2010-0453 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (53rd percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2010-0453?

CVE-2010-0453 primarily affects Sun Opensolaris. In total, 66 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2010-0453?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2010-0453 published?

CVE-2010-0453 was published on 2010-02-03 and last updated on 2026-06-16.

References

• http://osvdb.org/62046
• http://secunia.com/advisories/38452
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-143913-01-1
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-275910-1
• http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021799.1-1
• http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html
• http://www.securityfocus.com/archive/1/509276/100/0/threaded
• http://www.securityfocus.com/bid/38016
• http://www.trapkit.de/advisories/TKADV2010-001.txt
• http://www.us-cert.gov/cas/techalerts/TA10-103B.html
• http://www.vupen.com/english/advisories/2010/0270
• https://exchange.xforce.ibmcloud.com/vulnerabilities/55991
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6959

Affected products (66)

• cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*
• cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*
• cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*
• cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*
• cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*
• cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*
• cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*
• cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*
• cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*
• cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*
• cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*
• cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*
• cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*
• cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*
• cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*
• cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*
• cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*
• cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*
• cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*
• cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*
• cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*
• cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*
• cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*
• cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*
• cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*
• cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*
• cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*
• cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*
• cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*
• cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*
• cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*
• cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*
• cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*
• cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*
• cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*
• cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*
• cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*
• cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*
• cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*
• cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*

More vulnerabilities in Sun Opensolaris

• CVE-2009-2296 — Critical (CVSS 10.0): The NFSv4 server kernel module in Sun Solaris 10, and OpenSolaris before snv_119, does not properly implement the…
• CVE-2008-5010 — Critical (CVSS 10.0): in.dhcpd in the DHCP implementation in Sun Solaris 8 through 10, and OpenSolaris before snv_103, allows remote…
• CVE-2016-1291 — Critical (CVSS 9.8): Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allow remote…
• CVE-2016-1329 — Critical (CVSS 9.8): Cisco NX-OS 6.0(2)U6(1) through 6.0(2)U6(5) on Nexus 3000 devices and 6.0(2)A6(1) through 6.0(2)A6(5) and 6.0(2)A7(1)…
• CVE-2015-6319 — Critical (CVSS 9.8): SQL injection vulnerability in the web-based management interface on Cisco RV220W devices allows remote attackers to…
• CVE-2008-0965 — Critical (CVSS 9.3): Multiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o…

All CVEs affecting Sun Opensolaris →

Other CWE-20 (Improper Input Validation) vulnerabilities

• CVE-2026-48316 — Critical (CVSS 10.0): ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that could…
• CVE-2026-48281 — Critical (CVSS 10.0): ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that could…
• CVE-2026-48277 — Critical (CVSS 10.0): ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that could…
• CVE-2026-48055 — Critical (CVSS 10.0): Streambert is a cross-platform Electron Desktop App to stream and download any video media. In versions 2.4.0 and…
• CVE-2026-34910 — Critical (CVSS 10.0): A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS…
• CVE-2026-33587 — Critical (CVSS 10.0): Lack of user input sanitisation in Open Notebook v1.8.3 allows the application user to execute Python code (and…

Browse all CWE-20 (Improper Input Validation) vulnerabilities →