CVE-2009-0745

EPSS 0.41%
Veröffentlicht 27.02.2009 17:30:09
Zuletzt bearbeitet 16.06.2026 23:05:42
CVE-Watchlists
Login
Unerledigt
Login

The ext4_group_add function in fs/ext4/resize.c in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 does not properly initialize the group descriptor during a resize (aka resize2fs) operation, which might allow local users to cause a denial of service (OOPS) by arranging for crafted values to be present in available memory.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 21

NVD 26 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Linux ≫ Linux Kernel Version2.6.27

Linux ≫ Linux Kernel Version2.6.27.1

Linux ≫ Linux Kernel Version2.6.27.2

Linux ≫ Linux Kernel Version2.6.27.3

Linux ≫ Linux Kernel Version2.6.27.4

Linux ≫ Linux Kernel Version2.6.27.5

Linux ≫ Linux Kernel Version2.6.27.6

Linux ≫ Linux Kernel Version2.6.27.7

Linux ≫ Linux Kernel Version2.6.27.8

Linux ≫ Linux Kernel Version2.6.27.9

Linux ≫ Linux Kernel Version2.6.27.10

Linux ≫ Linux Kernel Version2.6.27.11

Linux ≫ Linux Kernel Version2.6.27.12

Linux ≫ Linux Kernel Version2.6.27.13

Linux ≫ Linux Kernel Version2.6.27.14

Linux ≫ Linux Kernel Version2.6.27.15

Linux ≫ Linux Kernel Version2.6.27.16

Linux ≫ Linux Kernel Version2.6.27.17

Linux ≫ Linux Kernel Version2.6.27.18

Linux ≫ Linux Kernel Version2.6.28

Linux ≫ Linux Kernel Version2.6.28.1

Linux ≫ Linux Kernel Version2.6.28.2

Linux ≫ Linux Kernel Version2.6.28.3

Linux ≫ Linux Kernel Version2.6.28.4

Linux ≫ Linux Kernel Version2.6.28.5

Linux ≫ Linux Kernel Version2.6.28.6

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.41%	0.324

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	4.9	3.9	6.9	AV:L/AC:L/Au:N/C:N/I:N/A:C

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://secunia.com/advisories/37471

http://www.securityfocus.com/archive/1/507985/100/0/threaded

http://www.vmware.com/security/advisories/VMSA-2009-0016.html

http://www.vupen.com/english/advisories/2009/3316

http://secunia.com/advisories/34981

http://www.debian.org/security/2009/dsa-1787

http://secunia.com/advisories/34394

http://www.debian.org/security/2009/dsa-1749

http://www.ubuntu.com/usn/usn-751-1

http://bugzilla.kernel.org/show_bug.cgi?id=12433

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fdff73f094e7220602cc3f8959c7230517976412

http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.19

http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.7

http://rhn.redhat.com/errata/RHSA-2009-1243.html

http://secunia.com/advisories/36562

http://www.vupen.com/english/advisories/2009/0509

Vendor Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10942

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7765

https://nvd.nist.gov/vuln/detail/CVE-2009-0745

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2009-0745

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2009-0745

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2009-0745