CVE-2009-0065

EPSS 16.73%
Veröffentlicht 07.01.2009 19:30:00
Zuletzt bearbeitet 16.06.2026 23:04:11
Erkennungen
Login

Buffer overflow in net/sctp/sm_statefuns.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.28-git8 allows remote attackers to have an unknown impact via an FWD-TSN (aka FORWARD-TSN) chunk with a large stream ID.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 39

NVD 109 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Linux ≫ Linux Kernel Version <= 2.6.27

Linux ≫ Linux Kernel Version 2.2.27

Linux ≫ Linux Kernel Version 2.4.36

Linux ≫ Linux Kernel Version 2.4.36.1

Linux ≫ Linux Kernel Version 2.4.36.2

Linux ≫ Linux Kernel Version 2.4.36.3

Linux ≫ Linux Kernel Version 2.4.36.4

Linux ≫ Linux Kernel Version 2.4.36.5

Linux ≫ Linux Kernel Version 2.4.36.6

Linux ≫ Linux Kernel Version 2.6

Linux ≫ Linux Kernel Version 2.6.18

Linux ≫ Linux Kernel Version 2.6.18 Update rc1

Linux ≫ Linux Kernel Version 2.6.18 Update rc2

Linux ≫ Linux Kernel Version 2.6.18 Update rc3

Linux ≫ Linux Kernel Version 2.6.18 Update rc4

Linux ≫ Linux Kernel Version 2.6.18 Update rc5

Linux ≫ Linux Kernel Version 2.6.18 Update rc6

Linux ≫ Linux Kernel Version 2.6.18 Update rc7

Linux ≫ Linux Kernel Version 2.6.19.4

Linux ≫ Linux Kernel Version 2.6.19.5

Linux ≫ Linux Kernel Version 2.6.19.6

Linux ≫ Linux Kernel Version 2.6.19.7

Linux ≫ Linux Kernel Version 2.6.20.16

Linux ≫ Linux Kernel Version 2.6.20.17

Linux ≫ Linux Kernel Version 2.6.20.18

Linux ≫ Linux Kernel Version 2.6.20.19

Linux ≫ Linux Kernel Version 2.6.20.20

Linux ≫ Linux Kernel Version 2.6.20.21

Linux ≫ Linux Kernel Version 2.6.21.5

Linux ≫ Linux Kernel Version 2.6.21.6

Linux ≫ Linux Kernel Version 2.6.21.7

Linux ≫ Linux Kernel Version 2.6.22

Linux ≫ Linux Kernel Version 2.6.22.1

Linux ≫ Linux Kernel Version 2.6.22.2

Linux ≫ Linux Kernel Version 2.6.22.8

Linux ≫ Linux Kernel Version 2.6.22.9

Linux ≫ Linux Kernel Version 2.6.22.10

Linux ≫ Linux Kernel Version 2.6.22.11

Linux ≫ Linux Kernel Version 2.6.22.12

Linux ≫ Linux Kernel Version 2.6.22.13

Linux ≫ Linux Kernel Version 2.6.22.14

Linux ≫ Linux Kernel Version 2.6.22.15

Linux ≫ Linux Kernel Version 2.6.22.17

Linux ≫ Linux Kernel Version 2.6.22.18

Linux ≫ Linux Kernel Version 2.6.22.19

Linux ≫ Linux Kernel Version 2.6.22.20

Linux ≫ Linux Kernel Version 2.6.22.21

Linux ≫ Linux Kernel Version 2.6.22.22

Linux ≫ Linux Kernel Version 2.6.22_rc1

Linux ≫ Linux Kernel Version 2.6.22_rc7

Linux ≫ Linux Kernel Version 2.6.23

Linux ≫ Linux Kernel Version 2.6.23.8

Linux ≫ Linux Kernel Version 2.6.23.9

Linux ≫ Linux Kernel Version 2.6.23.10

Linux ≫ Linux Kernel Version 2.6.23.11

Linux ≫ Linux Kernel Version 2.6.23.12

Linux ≫ Linux Kernel Version 2.6.23.13

Linux ≫ Linux Kernel Version 2.6.23.15

Linux ≫ Linux Kernel Version 2.6.23.16

Linux ≫ Linux Kernel Version 2.6.23.17

Linux ≫ Linux Kernel Version 2.6.23_rc1

Linux ≫ Linux Kernel Version 2.6.24

Linux ≫ Linux Kernel Version 2.6.24.1

Linux ≫ Linux Kernel Version 2.6.24.2

Linux ≫ Linux Kernel Version 2.6.24.3

Linux ≫ Linux Kernel Version 2.6.24.4

Linux ≫ Linux Kernel Version 2.6.24.5

Linux ≫ Linux Kernel Version 2.6.24.6

Linux ≫ Linux Kernel Version 2.6.24.7

Linux ≫ Linux Kernel Version 2.6.24_rc1

Linux ≫ Linux Kernel Version 2.6.24_rc4

Linux ≫ Linux Kernel Version 2.6.24_rc5

Linux ≫ Linux Kernel Version 2.6.25

Linux ≫ Linux Kernel Version 2.6.25 Edition x86_64

Linux ≫ Linux Kernel Version 2.6.25.1

Linux ≫ Linux Kernel Version 2.6.25.1 Edition x86_64

Linux ≫ Linux Kernel Version 2.6.25.2

Linux ≫ Linux Kernel Version 2.6.25.2 Edition x86_64

Linux ≫ Linux Kernel Version 2.6.25.3

Linux ≫ Linux Kernel Version 2.6.25.3 Edition x86_64

Linux ≫ Linux Kernel Version 2.6.25.4

Linux ≫ Linux Kernel Version 2.6.25.4 Edition x86_64

Linux ≫ Linux Kernel Version 2.6.25.5

Linux ≫ Linux Kernel Version 2.6.25.5 Edition x86_64

Linux ≫ Linux Kernel Version 2.6.25.6

Linux ≫ Linux Kernel Version 2.6.25.6 Edition x86_64

Linux ≫ Linux Kernel Version 2.6.25.7

Linux ≫ Linux Kernel Version 2.6.25.7 Edition x86_64

Linux ≫ Linux Kernel Version 2.6.25.8

Linux ≫ Linux Kernel Version 2.6.25.8 Edition x86_64

Linux ≫ Linux Kernel Version 2.6.25.9

Linux ≫ Linux Kernel Version 2.6.25.9 Edition x86_64

Linux ≫ Linux Kernel Version 2.6.25.10

Linux ≫ Linux Kernel Version 2.6.25.10 Edition x86_64

Linux ≫ Linux Kernel Version 2.6.25.11

Linux ≫ Linux Kernel Version 2.6.25.11 Edition x86_64

Linux ≫ Linux Kernel Version 2.6.25.12

Linux ≫ Linux Kernel Version 2.6.25.12 Edition x86_64

Linux ≫ Linux Kernel Version 2.6.25.13

Linux ≫ Linux Kernel Version 2.6.25.14

Linux ≫ Linux Kernel Version 2.6.25.15

Linux ≫ Linux Kernel Version 2.6.25.16

Linux ≫ Linux Kernel Version 2.6.25.17

Linux ≫ Linux Kernel Version 2.6.26

Linux ≫ Linux Kernel Version 2.6.26.1

Linux ≫ Linux Kernel Version 2.6.26.2

Linux ≫ Linux Kernel Version 2.6.26.3

Linux ≫ Linux Kernel Version 2.6.26.4

Linux ≫ Linux Kernel Version 2.6.26.5

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	16.73%	0.966

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html

http://secunia.com/advisories/35390

http://rhn.redhat.com/errata/RHSA-2009-0264.html

http://secunia.com/advisories/33858

http://secunia.com/advisories/33854

http://www.redhat.com/support/errata/RHSA-2009-0053.html

http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html

http://secunia.com/advisories/34981

http://www.debian.org/security/2009/dsa-1787

http://secunia.com/advisories/35011

http://www.debian.org/security/2009/dsa-1794

http://secunia.com/advisories/34252

http://secunia.com/advisories/34762

http://support.avaya.com/elmodocs2/security/ASA-2009-114.htm

http://www.redhat.com/support/errata/RHSA-2009-0331.html

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9fcb95a105758b81ef0131cd18e2db5149f13e95

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01832118

http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html

http://patchwork.ozlabs.org/patch/15024/

http://secunia.com/advisories/33674

http://secunia.com/advisories/34394

http://secunia.com/advisories/34680

http://secunia.com/advisories/35174

http://secunia.com/advisories/35394

http://secunia.com/advisories/36191

http://www.debian.org/security/2009/dsa-1749

http://www.openwall.com/lists/oss-security/2009/01/05/1

http://www.redhat.com/support/errata/RHSA-2009-1055.html

http://www.securityfocus.com/bid/33113

http://www.securitytracker.com/id?1022698

http://www.ubuntu.com/usn/usn-751-1

http://www.vupen.com/english/advisories/2009/0029

http://www.vupen.com/english/advisories/2009/2193

https://bugzilla.redhat.com/show_bug.cgi?id=478800

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10872

https://www.redhat.com/archives/fedora-package-announce/2009-January/msg01045.html

https://nvd.nist.gov/vuln/detail/CVE-2009-0065

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2009-0065

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2009-0065

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2009-0065