5

CVE-2009-1265

Exploit
Integer overflow in rose_sendmsg (sys/net/af_rose.c) in the Linux kernel 2.6.24.4, and other versions before 2.6.30-rc1, might allow remote attackers to obtain sensitive information via a large length value, which causes "garbage" memory to be sent.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
LinuxLinux Kernel Version2.6.24.4
LinuxLinux Kernel Version2.6.24.5
LinuxLinux Kernel Version2.6.24.6
LinuxLinux Kernel Version2.6.24.7
LinuxLinux Kernel Version2.6.25
LinuxLinux Kernel Version2.6.25.1
LinuxLinux Kernel Version2.6.25.2
LinuxLinux Kernel Version2.6.25.3
LinuxLinux Kernel Version2.6.25.4
LinuxLinux Kernel Version2.6.25.5
LinuxLinux Kernel Version2.6.25.6
LinuxLinux Kernel Version2.6.25.7
LinuxLinux Kernel Version2.6.25.8
LinuxLinux Kernel Version2.6.25.9
LinuxLinux Kernel Version2.6.25.10
LinuxLinux Kernel Version2.6.25.11
LinuxLinux Kernel Version2.6.25.12
LinuxLinux Kernel Version2.6.25.13
LinuxLinux Kernel Version2.6.25.14
LinuxLinux Kernel Version2.6.25.15
LinuxLinux Kernel Version2.6.25.16
LinuxLinux Kernel Version2.6.25.17
LinuxLinux Kernel Version2.6.25.18
LinuxLinux Kernel Version2.6.25.19
LinuxLinux Kernel Version2.6.25.20
LinuxLinux Kernel Version2.6.26
LinuxLinux Kernel Version2.6.26.1
LinuxLinux Kernel Version2.6.26.2
LinuxLinux Kernel Version2.6.26.3
LinuxLinux Kernel Version2.6.26.4
LinuxLinux Kernel Version2.6.26.5
LinuxLinux Kernel Version2.6.26.6
LinuxLinux Kernel Version2.6.26.7
LinuxLinux Kernel Version2.6.27
LinuxLinux Kernel Version2.6.27.1
LinuxLinux Kernel Version2.6.27.2
LinuxLinux Kernel Version2.6.27.3
LinuxLinux Kernel Version2.6.27.4
LinuxLinux Kernel Version2.6.27.5
LinuxLinux Kernel Version2.6.27.6
LinuxLinux Kernel Version2.6.27.7
LinuxLinux Kernel Version2.6.27.8
LinuxLinux Kernel Version2.6.27.9
LinuxLinux Kernel Version2.6.27.10
LinuxLinux Kernel Version2.6.27.11
LinuxLinux Kernel Version2.6.27.12
LinuxLinux Kernel Version2.6.27.13
LinuxLinux Kernel Version2.6.27.14
LinuxLinux Kernel Version2.6.27.15
LinuxLinux Kernel Version2.6.27.16
LinuxLinux Kernel Version2.6.27.17
LinuxLinux Kernel Version2.6.27.18
LinuxLinux Kernel Version2.6.27.19
LinuxLinux Kernel Version2.6.27.20
LinuxLinux Kernel Version2.6.27.21
LinuxLinux Kernel Version2.6.27.22
LinuxLinux Kernel Version2.6.27.23
LinuxLinux Kernel Version2.6.27.24
LinuxLinux Kernel Version2.6.27.25
LinuxLinux Kernel Version2.6.27.26
LinuxLinux Kernel Version2.6.27.27
LinuxLinux Kernel Version2.6.27.28
LinuxLinux Kernel Version2.6.27.29
LinuxLinux Kernel Version2.6.27.30
LinuxLinux Kernel Version2.6.27.31
LinuxLinux Kernel Version2.6.27.32
LinuxLinux Kernel Version2.6.27.33
LinuxLinux Kernel Version2.6.27.34
LinuxLinux Kernel Version2.6.27.35
LinuxLinux Kernel Version2.6.27.36
LinuxLinux Kernel Version2.6.27.37
LinuxLinux Kernel Version2.6.27.38
LinuxLinux Kernel Version2.6.27.39
LinuxLinux Kernel Version2.6.27.40
LinuxLinux Kernel Version2.6.27.41
LinuxLinux Kernel Version2.6.27.42
LinuxLinux Kernel Version2.6.27.43
LinuxLinux Kernel Version2.6.27.44
LinuxLinux Kernel Version2.6.27.45
LinuxLinux Kernel Version2.6.27.46
LinuxLinux Kernel Version2.6.27.47
LinuxLinux Kernel Version2.6.27.48
LinuxLinux Kernel Version2.6.27.49
LinuxLinux Kernel Version2.6.27.50
LinuxLinux Kernel Version2.6.27.51
LinuxLinux Kernel Version2.6.27.52
LinuxLinux Kernel Version2.6.27.53
LinuxLinux Kernel Version2.6.27.54
LinuxLinux Kernel Version2.6.27.55
LinuxLinux Kernel Version2.6.27.56
LinuxLinux Kernel Version2.6.27.57
LinuxLinux Kernel Version2.6.27.58
LinuxLinux Kernel Version2.6.27.59
LinuxLinux Kernel Version2.6.27.60
LinuxLinux Kernel Version2.6.27.61
LinuxLinux Kernel Version2.6.27.62
LinuxLinux Kernel Version2.6.28
LinuxLinux Kernel Version2.6.28.1
LinuxLinux Kernel Version2.6.28.2
LinuxLinux Kernel Version2.6.28.3
LinuxLinux Kernel Version2.6.28.4
LinuxLinux Kernel Version2.6.28.5
LinuxLinux Kernel Version2.6.28.6
LinuxLinux Kernel Version2.6.28.7
LinuxLinux Kernel Version2.6.28.8
LinuxLinux Kernel Version2.6.28.9
LinuxLinux Kernel Version2.6.28.10
LinuxLinux Kernel Version2.6.29
LinuxLinux Kernel Version2.6.29.1
LinuxLinux Kernel Version2.6.29.2
LinuxLinux Kernel Version2.6.29.3
LinuxLinux Kernel Version2.6.29.4
LinuxLinux Kernel Version2.6.29.5
LinuxLinux Kernel Version2.6.29.6
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.17% 0.864
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html
http://secunia.com/advisories/35390
Vendor Advisory
http://secunia.com/advisories/34981
Vendor Advisory
http://www.debian.org/security/2009/dsa-1787
http://secunia.com/advisories/35011
Vendor Advisory
http://www.debian.org/security/2009/dsa-1794
http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html
http://secunia.com/advisories/35394
Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2009:135
http://secunia.com/advisories/35121
Vendor Advisory
http://www.debian.org/security/2009/dsa-1800
http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html
http://secunia.com/advisories/35185
Vendor Advisory
http://secunia.com/advisories/35656
Vendor Advisory
http://www.ubuntu.com/usn/usn-793-1
http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html
http://secunia.com/advisories/35387
Vendor Advisory
http://bugzilla.kernel.org/show_bug.cgi?id=10423
Exploit
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=83e0bbcbe2145f160fbaa109b0439dae7f4a38a9
http://osvdb.org/53571
http://osvdb.org/53630
http://osvdb.org/53631
http://www.mandriva.com/security/advisories?name=MDVSA-2009:119
http://www.openwall.com/lists/oss-security/2009/04/08/2
http://www.securityfocus.com/bid/34654