Lucene search

[email protected]NVD:CVE-2009-1265

HistoryApr 08, 2009 - 1:30 a.m.

CVE-2009-1265

2009-04-0801:30:00

CWE-189

[email protected]

web.nvd.nist.gov

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

4.3 Medium

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

86.0%

JSON

Integer overflow in rose_sendmsg (sys/net/af_rose.c) in the Linux kernel 2.6.24.4, and other versions before 2.6.30-rc1, might allow remote attackers to obtain sensitive information via a large length value, which causes “garbage” memory to be sent.

Affected configurations

NVD

Node

linuxlinux_kernelMatch2.6.24.4

linuxlinux_kernelMatch2.6.24.5

linuxlinux_kernelMatch2.6.24.6

linuxlinux_kernelMatch2.6.24.7

linuxlinux_kernelMatch2.6.25

linuxlinux_kernelMatch2.6.25.1

linuxlinux_kernelMatch2.6.25.2

linuxlinux_kernelMatch2.6.25.3

linuxlinux_kernelMatch2.6.25.4

linuxlinux_kernelMatch2.6.25.5

linuxlinux_kernelMatch2.6.25.6

linuxlinux_kernelMatch2.6.25.7

linuxlinux_kernelMatch2.6.25.8

linuxlinux_kernelMatch2.6.25.9

linuxlinux_kernelMatch2.6.25.10

linuxlinux_kernelMatch2.6.25.11

linuxlinux_kernelMatch2.6.25.12

linuxlinux_kernelMatch2.6.25.13

linuxlinux_kernelMatch2.6.25.14

linuxlinux_kernelMatch2.6.25.15

linuxlinux_kernelMatch2.6.25.16

linuxlinux_kernelMatch2.6.25.17

linuxlinux_kernelMatch2.6.25.18

linuxlinux_kernelMatch2.6.25.19

linuxlinux_kernelMatch2.6.25.20

linuxlinux_kernelMatch2.6.26

linuxlinux_kernelMatch2.6.26.1

linuxlinux_kernelMatch2.6.26.2

linuxlinux_kernelMatch2.6.26.3

linuxlinux_kernelMatch2.6.26.4

linuxlinux_kernelMatch2.6.26.5

linuxlinux_kernelMatch2.6.26.6

linuxlinux_kernelMatch2.6.26.7

linuxlinux_kernelMatch2.6.27

linuxlinux_kernelMatch2.6.27.1

linuxlinux_kernelMatch2.6.27.2

linuxlinux_kernelMatch2.6.27.3

linuxlinux_kernelMatch2.6.27.4

linuxlinux_kernelMatch2.6.27.5

linuxlinux_kernelMatch2.6.27.6

linuxlinux_kernelMatch2.6.27.7

linuxlinux_kernelMatch2.6.27.8

linuxlinux_kernelMatch2.6.27.9

linuxlinux_kernelMatch2.6.27.10

linuxlinux_kernelMatch2.6.27.11

linuxlinux_kernelMatch2.6.27.12

linuxlinux_kernelMatch2.6.27.13

linuxlinux_kernelMatch2.6.27.14

linuxlinux_kernelMatch2.6.27.15

linuxlinux_kernelMatch2.6.27.16

linuxlinux_kernelMatch2.6.27.17

linuxlinux_kernelMatch2.6.27.18

linuxlinux_kernelMatch2.6.27.19

linuxlinux_kernelMatch2.6.27.20

linuxlinux_kernelMatch2.6.27.21

linuxlinux_kernelMatch2.6.27.22

linuxlinux_kernelMatch2.6.27.23

linuxlinux_kernelMatch2.6.27.24

linuxlinux_kernelMatch2.6.27.25

linuxlinux_kernelMatch2.6.27.26

linuxlinux_kernelMatch2.6.27.27

linuxlinux_kernelMatch2.6.27.28

linuxlinux_kernelMatch2.6.27.29

linuxlinux_kernelMatch2.6.27.30

linuxlinux_kernelMatch2.6.27.31

linuxlinux_kernelMatch2.6.27.32

linuxlinux_kernelMatch2.6.27.33

linuxlinux_kernelMatch2.6.27.34

linuxlinux_kernelMatch2.6.27.35

linuxlinux_kernelMatch2.6.27.36

linuxlinux_kernelMatch2.6.27.37

linuxlinux_kernelMatch2.6.27.38

linuxlinux_kernelMatch2.6.27.39

linuxlinux_kernelMatch2.6.27.40

linuxlinux_kernelMatch2.6.27.41

linuxlinux_kernelMatch2.6.27.42

linuxlinux_kernelMatch2.6.27.43

linuxlinux_kernelMatch2.6.27.44

linuxlinux_kernelMatch2.6.27.45

linuxlinux_kernelMatch2.6.27.46

linuxlinux_kernelMatch2.6.27.47

linuxlinux_kernelMatch2.6.27.48

linuxlinux_kernelMatch2.6.27.49

linuxlinux_kernelMatch2.6.27.50

linuxlinux_kernelMatch2.6.27.51

linuxlinux_kernelMatch2.6.27.52

linuxlinux_kernelMatch2.6.27.53

linuxlinux_kernelMatch2.6.27.54

linuxlinux_kernelMatch2.6.27.55

linuxlinux_kernelMatch2.6.27.56

linuxlinux_kernelMatch2.6.27.57

linuxlinux_kernelMatch2.6.27.58

linuxlinux_kernelMatch2.6.27.59

linuxlinux_kernelMatch2.6.27.60

linuxlinux_kernelMatch2.6.27.61

linuxlinux_kernelMatch2.6.27.62

linuxlinux_kernelMatch2.6.28

linuxlinux_kernelMatch2.6.28.1

linuxlinux_kernelMatch2.6.28.2

linuxlinux_kernelMatch2.6.28.3

linuxlinux_kernelMatch2.6.28.4

linuxlinux_kernelMatch2.6.28.5

linuxlinux_kernelMatch2.6.28.6

linuxlinux_kernelMatch2.6.28.7

linuxlinux_kernelMatch2.6.28.8

linuxlinux_kernelMatch2.6.28.9

linuxlinux_kernelMatch2.6.28.10

linuxlinux_kernelMatch2.6.29

linuxlinux_kernelMatch2.6.29.1

linuxlinux_kernelMatch2.6.29.2

linuxlinux_kernelMatch2.6.29.3

linuxlinux_kernelMatch2.6.29.4

linuxlinux_kernelMatch2.6.29.5

linuxlinux_kernelMatch2.6.29.6

References

bugzilla.kernel.org/show_bug.cgi?id=10423

git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=83e0bbcbe2145f160fbaa109b0439dae7f4a38a9

lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html

lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html

lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html

lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html

osvdb.org/53571

osvdb.org/53630

osvdb.org/53631

secunia.com/advisories/34981

secunia.com/advisories/35011

secunia.com/advisories/35121

secunia.com/advisories/35185

secunia.com/advisories/35387

secunia.com/advisories/35390

secunia.com/advisories/35394

secunia.com/advisories/35656

www.debian.org/security/2009/dsa-1787

www.debian.org/security/2009/dsa-1794

www.debian.org/security/2009/dsa-1800

www.mandriva.com/security/advisories?name=MDVSA-2009:119

www.mandriva.com/security/advisories?name=MDVSA-2009:135

www.openwall.com/lists/oss-security/2009/04/08/2

www.securityfocus.com/bid/34654

www.ubuntu.com/usn/usn-793-1

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

4.3 Medium

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

86.0%

JSON

Related for NVD:CVE-2009-1265

redhatcve1 seebug1 cve2 prion1 cvelist1 ubuntucve1 nvd1 openvas24 nessus12 suse5 securityvulns2 debian3 osv3 ubuntu1