Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2009-4536

Опубликовано: 28 дек. 2009
Источник: redhat
CVSS2: 6.8
EPSS Низкий

Описание

drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by processing certain trailing payload data as if it were a complete frame, which allows remote attackers to bypass packet filters via a large packet with a crafted payload. NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-1385.

Дополнительная информация

Статус:

Important
https://bugzilla.redhat.com/show_bug.cgi?id=552126kernel: e1000 issue reported at 26c3

EPSS

Процентиль: 81%
0.01586
Низкий

6.8 Medium

CVSS2

Связанные уязвимости

ubuntu
больше 15 лет назад

drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by processing certain trailing payload data as if it were a complete frame, which allows remote attackers to bypass packet filters via a large packet with a crafted payload. NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-1385.

nvd
больше 15 лет назад

drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by processing certain trailing payload data as if it were a complete frame, which allows remote attackers to bypass packet filters via a large packet with a crafted payload. NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-1385.

debian
больше 15 лет назад

drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel ...

github
около 3 лет назад

drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by processing certain trailing payload data as if it were a complete frame, which allows remote attackers to bypass packet filters via a large packet with a crafted payload. NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-1385.

oracle-oval
больше 15 лет назад

ELSA-2010-0019: kernel security update (IMPORTANT)

EPSS

Процентиль: 81%
0.01586
Низкий

6.8 Medium

CVSS2