PRIOn knowledge basePRION:CVE-2009-2903Memory corruption
Memory leak in the appletalk subsystem in the Linux kernel 2.4.x through 2.4.37.6 and 2.6.x through 2.6.31, when the appletalk and ipddp modules are loaded but the ipddp"N" device is not found, allows remote attackers to cause a denial of service (memory consumption) via IP-DDP datagrams.
References
git.kernel.org/?p=linux/kernel/git/davem/net-next-2.6.git%3Ba=commit%3Bh=ffcfb8db540ff879c2a85bf7e404954281443414
lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html
lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html
lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html
lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html
secunia.com/advisories/36707
secunia.com/advisories/37105
secunia.com/advisories/37909
www.mandriva.com/security/advisories?name=MDVSA-2009:329
www.openwall.com/lists/oss-security/2009/09/14/1
www.openwall.com/lists/oss-security/2009/09/14/2
www.openwall.com/lists/oss-security/2009/09/17/11
www.securityfocus.com/bid/36379
www.ubuntu.com/usn/USN-852-1
bugzilla.redhat.com/show_bug.cgi?id=522331
Related
