CVE-2009-2903

Опубликовано: 15 сент. 2009

Источник: nvd

CVSS2: 7.1

EPSS Низкий

Описание

Memory leak in the appletalk subsystem in the Linux kernel 2.4.x through 2.4.37.6 and 2.6.x through 2.6.31, when the appletalk and ipddp modules are loaded but the ipddp"N" device is not found, allows remote attackers to cause a denial of service (memory consumption) via IP-DDP datagrams.

Ссылки

http://git.kernel.org/?p=linux/kernel/git/davem/net-next-2.6.git%3Ba=commit%3Bh=ffcfb8db540ff879c2a85bf7e404954281443414
http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html
Mailing List
Third Party Advisory
http://secunia.com/advisories/36707
Third Party Advisory
http://secunia.com/advisories/37105
Third Party Advisory
http://secunia.com/advisories/37909
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2009:329
Third Party Advisory
http://www.openwall.com/lists/oss-security/2009/09/14/1
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2009/09/14/2
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2009/09/17/11
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/36379
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-852-1
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=522331
Issue Tracking
Third Party Advisory
http://git.kernel.org/?p=linux/kernel/git/davem/net-next-2.6.git%3Ba=commit%3Bh=ffcfb8db540ff879c2a85bf7e404954281443414
http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 2.4.0 (включая) до 2.4.37.6 (включая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 2.6.0 (включая) до 2.6.31 (включая)

Конфигурация 2

Одно из

cpe:2.3:a:suse:linux_enterprise_debuginfo:10:sp2:*:*:*:*:*:*

cpe:2.3:a:suse:linux_enterprise_debuginfo:10:sp3:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_desktop:10:sp2:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_desktop:10:sp3:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:10:sp3:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp2:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp3:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*

EPSS

Процентиль: 88%

0.03773

Низкий

7.1 High

CVSS2

Дефекты

CWE-772

Связанные уязвимости

CVE-2009-2903

ubuntu

больше 16 лет назад

CVE-2009-2903

redhat

больше 16 лет назад

CVE-2009-2903

debian

больше 16 лет назад

Memory leak in the appletalk subsystem in the Linux kernel 2.4.x throu ...

GHSA-q9qh-2r93-gfjh

github

больше 3 лет назад

EPSS

Процентиль: 88%

0.03773

Низкий

7.1 High

CVSS2

Дефекты

CWE-772