7.8

CVE-2009-1250

Exploit
The cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58, and IBM AFS 3.6 before Patch 19, on Linux allows remote attackers to cause a denial of service (system crash) via an RX response with a large error-code value that is interpreted as a pointer and dereferenced, related to use of the ERR_PTR macro.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Afs Update patch18 Version <= 3.6
   Linux ≫ Linux Kernel
Ibm ≫ Afs Version 3.6
   Linux ≫ Linux Kernel
Ibm ≫ Afs Version 3.6 Update patch12
   Linux ≫ Linux Kernel
Ibm ≫ Afs Version 3.6 Update patch13
   Linux ≫ Linux Kernel
Ibm ≫ Afs Version 3.6 Update patch14
   Linux ≫ Linux Kernel
Ibm ≫ Afs Version 3.6 Update patch15
   Linux ≫ Linux Kernel
Ibm ≫ Afs Version 3.6 Update patch16
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.0
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.0.1
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.0.2
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.0.3
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.0.4
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.0.4a
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.1
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.1.0
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.1.1
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.1.1a
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.2
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.2.1
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.2.2
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.2.2a
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.2.2b
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.2.3
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.2.4
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.2.5
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.2.6
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.2.7
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.2.8
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.2.9
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.2.10
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.2.11
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.2.13
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.3
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.3.1
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.3.2
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.3.5
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.3.70
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.3.74
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.3.77
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.3.81
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.4
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.4.0
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.4.3
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.4.4
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.4.5
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.4.6
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.4.7
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.4.7_pre1
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.4.7_pre2
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.4.7_pre3
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.4.7_pre4
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.4.7_pre5
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.4.8
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.4.8_pre1
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.4.8_pre2
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.4.8_pre3
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.5
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.5.16
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.5.17
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.5.26
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.5.27
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.5.30
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.5.31
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.5.32
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.5.33
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.5.34
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.5.35
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.5.36
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.5.38
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.5.39
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.5.50
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.5.52
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.5.53
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.5.54
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.5.55
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.5.56
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.5.57
   Linux ≫ Linux Kernel
Openafs ≫ Openafs Version 1.5.58
   Linux ≫ Linux Kernel
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.98% 0.891
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/34655
http://secunia.com/advisories/34684
http://secunia.com/advisories/36310
http://secunia.com/advisories/42896
http://security.gentoo.org/glsa/glsa-201101-05.xml
http://www-01.ibm.com/support/docview.wss?uid=swg21396389
http://www-1.ibm.com/support/docview.wss?uid=swg1ID71123
http://www.debian.org/security/2009/dsa-1768
http://www.mandriva.com/security/advisories?name=MDVSA-2009:099
http://www.openafs.org/security/OPENAFS-SA-2009-002.txt
http://www.openafs.org/security/openafs-sa-2009-002.patch
Exploit
http://www.securityfocus.com/bid/34404
http://www.vupen.com/english/advisories/2009/0984
http://www.vupen.com/english/advisories/2011/0117