Lucene search
HistoryApr 22, 2009 - 3:30 p.m.
CVE-2009-1336
linux
kernel
cve-2009-1336
denial of service
vulnerability
4.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
4.3 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
10.1%
fs/nfs/client.c in the Linux kernel before 2.6.23 does not properly initialize a certain structure member that stores the maximum NFS filename length, which allows local users to cause a denial of service (OOPS) via a long filename, related to the encode_lookup function.
Affected configurations
Node
linuxlinux_kernelRange≤2.6.22.19
ORlinuxlinux_kernelMatch2.6
ORlinuxlinux_kernelMatch2.6.0
ORlinuxlinux_kernelMatch2.6.1
ORlinuxlinux_kernelMatch2.6.2
ORlinuxlinux_kernelMatch2.6.10
ORlinuxlinux_kernelMatch2.6.11
ORlinuxlinux_kernelMatch2.6.11.1
ORlinuxlinux_kernelMatch2.6.11.2
ORlinuxlinux_kernelMatch2.6.11.3
ORlinuxlinux_kernelMatch2.6.11.4
ORlinuxlinux_kernelMatch2.6.11.5
ORlinuxlinux_kernelMatch2.6.11.6
ORlinuxlinux_kernelMatch2.6.11.7
ORlinuxlinux_kernelMatch2.6.11.8
ORlinuxlinux_kernelMatch2.6.11.9
ORlinuxlinux_kernelMatch2.6.11.10
ORlinuxlinux_kernelMatch2.6.11.11
ORlinuxlinux_kernelMatch2.6.11.12
ORlinuxlinux_kernelMatch2.6.12
ORlinuxlinux_kernelMatch2.6.12.1
ORlinuxlinux_kernelMatch2.6.12.2
ORlinuxlinux_kernelMatch2.6.12.3
ORlinuxlinux_kernelMatch2.6.12.4
ORlinuxlinux_kernelMatch2.6.12.5
ORlinuxlinux_kernelMatch2.6.12.6
ORlinuxlinux_kernelMatch2.6.13
ORlinuxlinux_kernelMatch2.6.13.1
ORlinuxlinux_kernelMatch2.6.13.2
ORlinuxlinux_kernelMatch2.6.13.3
ORlinuxlinux_kernelMatch2.6.13.4
ORlinuxlinux_kernelMatch2.6.13.5
ORlinuxlinux_kernelMatch2.6.14
ORlinuxlinux_kernelMatch2.6.14.1
ORlinuxlinux_kernelMatch2.6.14.2
ORlinuxlinux_kernelMatch2.6.14.3
ORlinuxlinux_kernelMatch2.6.14.4
ORlinuxlinux_kernelMatch2.6.14.5
ORlinuxlinux_kernelMatch2.6.14.6
ORlinuxlinux_kernelMatch2.6.14.7
ORlinuxlinux_kernelMatch2.6.15
ORlinuxlinux_kernelMatch2.6.15.1
ORlinuxlinux_kernelMatch2.6.15.2
ORlinuxlinux_kernelMatch2.6.15.3
ORlinuxlinux_kernelMatch2.6.15.4
ORlinuxlinux_kernelMatch2.6.15.5
ORlinuxlinux_kernelMatch2.6.15.6
ORlinuxlinux_kernelMatch2.6.15.7
ORlinuxlinux_kernelMatch2.6.16
ORlinuxlinux_kernelMatch2.6.16.1
ORlinuxlinux_kernelMatch2.6.16.2
ORlinuxlinux_kernelMatch2.6.16.3
ORlinuxlinux_kernelMatch2.6.16.4
ORlinuxlinux_kernelMatch2.6.16.5
ORlinuxlinux_kernelMatch2.6.16.6
ORlinuxlinux_kernelMatch2.6.16.7
ORlinuxlinux_kernelMatch2.6.16.8
ORlinuxlinux_kernelMatch2.6.16.9
ORlinuxlinux_kernelMatch2.6.16.10
ORlinuxlinux_kernelMatch2.6.16.11
ORlinuxlinux_kernelMatch2.6.16.12
ORlinuxlinux_kernelMatch2.6.16.13
ORlinuxlinux_kernelMatch2.6.16.14
ORlinuxlinux_kernelMatch2.6.16.15
ORlinuxlinux_kernelMatch2.6.16.16
ORlinuxlinux_kernelMatch2.6.16.17
ORlinuxlinux_kernelMatch2.6.16.18
ORlinuxlinux_kernelMatch2.6.16.19
ORlinuxlinux_kernelMatch2.6.16.20
ORlinuxlinux_kernelMatch2.6.16.21
ORlinuxlinux_kernelMatch2.6.16.22
ORlinuxlinux_kernelMatch2.6.16.23
ORlinuxlinux_kernelMatch2.6.16.24
ORlinuxlinux_kernelMatch2.6.16.25
ORlinuxlinux_kernelMatch2.6.16.26
ORlinuxlinux_kernelMatch2.6.16.27
ORlinuxlinux_kernelMatch2.6.16.28
ORlinuxlinux_kernelMatch2.6.16.29
ORlinuxlinux_kernelMatch2.6.16.30
ORlinuxlinux_kernelMatch2.6.16.31
ORlinuxlinux_kernelMatch2.6.16.32
ORlinuxlinux_kernelMatch2.6.16.33
ORlinuxlinux_kernelMatch2.6.16.34
ORlinuxlinux_kernelMatch2.6.16.35
ORlinuxlinux_kernelMatch2.6.16.36
ORlinuxlinux_kernelMatch2.6.16.37
ORlinuxlinux_kernelMatch2.6.16.38
ORlinuxlinux_kernelMatch2.6.16.39
ORlinuxlinux_kernelMatch2.6.16.40
ORlinuxlinux_kernelMatch2.6.16.41
ORlinuxlinux_kernelMatch2.6.16.42
ORlinuxlinux_kernelMatch2.6.16.43
ORlinuxlinux_kernelMatch2.6.16.44
ORlinuxlinux_kernelMatch2.6.16.45
ORlinuxlinux_kernelMatch2.6.16.46
ORlinuxlinux_kernelMatch2.6.16.47
ORlinuxlinux_kernelMatch2.6.16.48
ORlinuxlinux_kernelMatch2.6.16.49
ORlinuxlinux_kernelMatch2.6.16.50
ORlinuxlinux_kernelMatch2.6.16.51
ORlinuxlinux_kernelMatch2.6.16.52
ORlinuxlinux_kernelMatch2.6.16.53
ORlinuxlinux_kernelMatch2.6.16.54
ORlinuxlinux_kernelMatch2.6.16.55
ORlinuxlinux_kernelMatch2.6.16.56
ORlinuxlinux_kernelMatch2.6.16.57
ORlinuxlinux_kernelMatch2.6.16.58
ORlinuxlinux_kernelMatch2.6.16.59
ORlinuxlinux_kernelMatch2.6.16.60
ORlinuxlinux_kernelMatch2.6.16.61
ORlinuxlinux_kernelMatch2.6.16.62
ORlinuxlinux_kernelMatch2.6.17
ORlinuxlinux_kernelMatch2.6.17.1
ORlinuxlinux_kernelMatch2.6.17.2
ORlinuxlinux_kernelMatch2.6.17.3
ORlinuxlinux_kernelMatch2.6.17.4
ORlinuxlinux_kernelMatch2.6.17.5
ORlinuxlinux_kernelMatch2.6.17.6
ORlinuxlinux_kernelMatch2.6.17.7
ORlinuxlinux_kernelMatch2.6.17.8
ORlinuxlinux_kernelMatch2.6.17.9
ORlinuxlinux_kernelMatch2.6.17.10
ORlinuxlinux_kernelMatch2.6.17.11
ORlinuxlinux_kernelMatch2.6.17.12
ORlinuxlinux_kernelMatch2.6.17.13
ORlinuxlinux_kernelMatch2.6.17.14
ORlinuxlinux_kernelMatch2.6.18
ORlinuxlinux_kernelMatch2.6.18rc1
ORlinuxlinux_kernelMatch2.6.18rc2
ORlinuxlinux_kernelMatch2.6.18rc3
ORlinuxlinux_kernelMatch2.6.18rc4
ORlinuxlinux_kernelMatch2.6.18rc5
ORlinuxlinux_kernelMatch2.6.18rc6
ORlinuxlinux_kernelMatch2.6.18rc7
ORlinuxlinux_kernelMatch2.6.18.1
ORlinuxlinux_kernelMatch2.6.18.2
ORlinuxlinux_kernelMatch2.6.18.3
ORlinuxlinux_kernelMatch2.6.18.4
ORlinuxlinux_kernelMatch2.6.18.5
ORlinuxlinux_kernelMatch2.6.18.6
ORlinuxlinux_kernelMatch2.6.18.7
ORlinuxlinux_kernelMatch2.6.18.8
ORlinuxlinux_kernelMatch2.6.19
ORlinuxlinux_kernelMatch2.6.19.1
ORlinuxlinux_kernelMatch2.6.19.2
ORlinuxlinux_kernelMatch2.6.19.3
ORlinuxlinux_kernelMatch2.6.19.4
ORlinuxlinux_kernelMatch2.6.19.5
ORlinuxlinux_kernelMatch2.6.19.6
ORlinuxlinux_kernelMatch2.6.19.7
ORlinuxlinux_kernelMatch2.6.20
ORlinuxlinux_kernelMatch2.6.20.1
ORlinuxlinux_kernelMatch2.6.20.2
ORlinuxlinux_kernelMatch2.6.20.3
ORlinuxlinux_kernelMatch2.6.20.4
ORlinuxlinux_kernelMatch2.6.20.5
ORlinuxlinux_kernelMatch2.6.20.6
ORlinuxlinux_kernelMatch2.6.20.7
ORlinuxlinux_kernelMatch2.6.20.8
ORlinuxlinux_kernelMatch2.6.20.9
ORlinuxlinux_kernelMatch2.6.20.10
ORlinuxlinux_kernelMatch2.6.20.11
ORlinuxlinux_kernelMatch2.6.20.12
ORlinuxlinux_kernelMatch2.6.20.13
ORlinuxlinux_kernelMatch2.6.20.14
ORlinuxlinux_kernelMatch2.6.20.15
ORlinuxlinux_kernelMatch2.6.20.16
ORlinuxlinux_kernelMatch2.6.20.17
ORlinuxlinux_kernelMatch2.6.20.18
ORlinuxlinux_kernelMatch2.6.20.19
ORlinuxlinux_kernelMatch2.6.20.20
ORlinuxlinux_kernelMatch2.6.20.21
ORlinuxlinux_kernelMatch2.6.21
ORlinuxlinux_kernelMatch2.6.21.1
ORlinuxlinux_kernelMatch2.6.21.2
ORlinuxlinux_kernelMatch2.6.21.3
ORlinuxlinux_kernelMatch2.6.21.4
ORlinuxlinux_kernelMatch2.6.21.5
ORlinuxlinux_kernelMatch2.6.21.6
ORlinuxlinux_kernelMatch2.6.21.7
ORlinuxlinux_kernelMatch2.6.22
ORlinuxlinux_kernelMatch2.6.22.1
ORlinuxlinux_kernelMatch2.6.22.2
ORlinuxlinux_kernelMatch2.6.22.3
ORlinuxlinux_kernelMatch2.6.22.4
ORlinuxlinux_kernelMatch2.6.22.5
ORlinuxlinux_kernelMatch2.6.22.6
ORlinuxlinux_kernelMatch2.6.22.7
ORlinuxlinux_kernelMatch2.6.22.8
ORlinuxlinux_kernelMatch2.6.22.9
ORlinuxlinux_kernelMatch2.6.22.10
ORlinuxlinux_kernelMatch2.6.22.11
ORlinuxlinux_kernelMatch2.6.22.12
ORlinuxlinux_kernelMatch2.6.22.13
ORlinuxlinux_kernelMatch2.6.22.14
ORlinuxlinux_kernelMatch2.6.22.15
ORlinuxlinux_kernelMatch2.6.22.16
ORlinuxlinux_kernelMatch2.6.22.17
ORlinuxlinux_kernelMatch2.6.22.18
References
git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=54af3bb543c071769141387a42deaaab5074da55
rhn.redhat.com/errata/RHSA-2009-0473.html
secunia.com/advisories/35011
secunia.com/advisories/35015
secunia.com/advisories/35160
secunia.com/advisories/35324
secunia.com/advisories/35656
secunia.com/advisories/37471
www.debian.org/security/2009/dsa-1794
www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23
www.openwall.com/lists/oss-security/2009/04/06/1
www.openwall.com/lists/oss-security/2009/04/17/2
www.redhat.com/support/errata/RHSA-2009-1024.html
www.redhat.com/support/errata/RHSA-2009-1077.html
www.securityfocus.com/archive/1/507985/100/0/threaded
www.securityfocus.com/bid/34390
www.securitytracker.com/id?1022176
www.ubuntu.com/usn/usn-793-1
www.vmware.com/security/advisories/VMSA-2009-0016.html
www.vupen.com/english/advisories/2009/3316
bugzilla.redhat.com/show_bug.cgi?id=494074
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10859
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8495
Social References
More
Related
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:31:53
cvelist
cvelist
CVE-2009-1336
2009-04-22 15:00:00
ubuntucve
ubuntucve
CVE-2009-1336
2009-04-22 00:00:00
prion
prion
Code injection
2009-04-22 15:30:00
nvd
nvd
CVE-2009-1336
2009-04-22 15:30:00
redhat
redhat
(RHSA-2009:1024) Important: Red Hat Enterprise Linux 4.8 kernel security and bug fix update
2009-05-18 16:01:21
(RHSA-2009:1077) Important: kernel security and bug fix update
2009-06-02 00:00:00
(RHSA-2009:0473) Important: kernel security and bug fix update
2009-05-07 00:00:00
openvas
openvas
RedHat Security Advisory RHSA-2009:1024
2009-05-20 00:00:00
RedHat Security Advisory RHSA-2009:1077
2009-06-05 00:00:00
RedHat Security Advisory RHSA-2009:1077
2009-06-05 00:00:00
nessus
nessus
RHEL 4 : kernel (RHSA-2009:1077)
2013-01-24 00:00:00
RHEL 4 : kernel (RHSA-2009:1024)
2009-05-19 00:00:00
Oracle Linux 5 : kernel (ELSA-2009-0473)
2013-07-12 00:00:00
centos
centos
kernel security update
2009-05-07 18:35:31
oraclelinux
oraclelinux
kernel security and bug fix update
2009-05-07 00:00:00
Oracle Enterprise Linux 4.8 kernel security and bug fix update
2009-05-26 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2009-07-02 00:00:00
debian
debian
osv
osv
linux-2.6 - multiple vulnerabilities
2009-05-06 00:00:00
4.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
4.3 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
10.1%
Related for CVE-2009-1336