CVE-2009-2903
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C
AI Score
Confidence
High
EPSS
Percentile
90.6%
Memory leak in the appletalk subsystem in the Linux kernel 2.4.x through 2.4.37.6 and 2.6.x through 2.6.31, when the appletalk and ipddp modules are loaded but the ipddp"N" device is not found, allows remote attackers to cause a denial of service (memory consumption) via IP-DDP datagrams.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| linux | linux_kernel | * | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| suse | linux_enterprise_debuginfo | 10 | cpe:2.3:a:suse:linux_enterprise_debuginfo:10:sp2:*:*:*:*:*:* |
| suse | linux_enterprise_debuginfo | 10 | cpe:2.3:a:suse:linux_enterprise_debuginfo:10:sp3:*:*:*:*:*:* |
| suse | linux_enterprise_desktop | 10 | cpe:2.3:o:suse:linux_enterprise_desktop:10:sp2:*:*:*:*:*:* |
| suse | linux_enterprise_desktop | 10 | cpe:2.3:o:suse:linux_enterprise_desktop:10:sp3:*:*:*:*:*:* |
| suse | linux_enterprise_server | 9 | cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:* |
| suse | linux_enterprise_server | 10 | cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:*:*:*:* |
| suse | linux_enterprise_server | 10 | cpe:2.3:o:suse:linux_enterprise_server:10:sp3:*:*:*:*:*:* |
| suse | linux_enterprise_software_development_kit | 10 | cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp2:*:*:*:*:*:* |
| suse | linux_enterprise_software_development_kit | 10 | cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp3:*:*:*:*:*:* |
References
git.kernel.org/?p=linux/kernel/git/davem/net-next-2.6.git%3Ba=commit%3Bh=ffcfb8db540ff879c2a85bf7e404954281443414
lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html
lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html
lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html
lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html
secunia.com/advisories/36707
secunia.com/advisories/37105
secunia.com/advisories/37909
www.mandriva.com/security/advisories?name=MDVSA-2009:329
www.openwall.com/lists/oss-security/2009/09/14/1
www.openwall.com/lists/oss-security/2009/09/14/2
www.openwall.com/lists/oss-security/2009/09/17/11
www.securityfocus.com/bid/36379
www.ubuntu.com/usn/USN-852-1
bugzilla.redhat.com/show_bug.cgi?id=522331
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C
AI Score
Confidence
High
EPSS
Percentile
90.6%