CVE-2009-1250

Опубликовано: 09 апр. 2009

Источник: nvd

CVSS2: 7.8

EPSS Низкий

Описание

The cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58, and IBM AFS 3.6 before Patch 19, on Linux allows remote attackers to cause a denial of service (system crash) via an RX response with a large error-code value that is interpreted as a pointer and dereferenced, related to use of the ERR_PTR macro.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:ibm:afs:*:patch18:*:*:*:*:*:*

Версия до 3.6 (включая)

cpe:2.3:a:ibm:afs:3.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:afs:3.6:patch12:*:*:*:*:*:*

cpe:2.3:a:ibm:afs:3.6:patch13:*:*:*:*:*:*

cpe:2.3:a:ibm:afs:3.6:patch14:*:*:*:*:*:*

cpe:2.3:a:ibm:afs:3.6:patch15:*:*:*:*:*:*

cpe:2.3:a:ibm:afs:3.6:patch16:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.0:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.0.1:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.0.2:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.0.3:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.0.4:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.0.4a:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.1:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.1.0:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.1.1:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.1.1a:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.2:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.2.2:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.2.2a:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.2.2b:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.2.3:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.2.4:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.2.5:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.2.6:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.2.7:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.2.8:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.2.9:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.2.10:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.2.11:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.2.13:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.3:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.3.1:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.3.2:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.3.5:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.3.70:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.3.74:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.3.77:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.3.81:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.4:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.4.0:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.4.3:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.4.4:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.4.5:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.4.6:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.4.7:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.4.7_pre1:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.4.7_pre2:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.4.7_pre3:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.4.7_pre4:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.4.7_pre5:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.4.8:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.4.8_pre1:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.4.8_pre2:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.4.8_pre3:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.5:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.5.16:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.5.17:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.5.26:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.5.27:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.5.30:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.5.31:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.5.32:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.5.33:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.5.34:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.5.35:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.5.36:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.5.38:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.5.39:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.5.50:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.5.52:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.5.53:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.5.54:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.5.55:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.5.56:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.5.57:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.5.58:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

EPSS

Процентиль: 90%

0.05847

Низкий

7.8 High

CVSS2

Дефекты

CWE-189

Связанные уязвимости

CVE-2009-1250

ubuntu

больше 16 лет назад

CVE-2009-1250

debian

больше 16 лет назад

The cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 ...

GHSA-cpqp-v482-xxhg

github

больше 3 лет назад

BDU:2015-09403

fstec

почти 15 лет назад

Уязвимости операционной системы Gentoo Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

BDU:2015-09679

fstec

больше 11 лет назад

EPSS

Процентиль: 90%

0.05847

Низкий

7.8 High

CVSS2

Дефекты

CWE-189