CVE

Id
38678  
CVE No.
CVE-2009-1243  
Status
Candidate  
Description
net/ipv4/udp.c in the Linux kernel before 2.6.29.1 performs an unlocking step in certain incorrect circumstances, which allows local users to cause a denial of service (panic) by reading zero bytes from the /proc/net/udp file and unspecified other files, related to the "udp seq_file infrastructure."  
Phase
Assigned (20090406)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
423529 38678 CVE-2009-1243 MLIST:[oss-security] 20090401 CVE request: kernel: udp: Wrong locking code in udp seq_file infrastructure  View
423530 38678 CVE-2009-1243 URL:http://openwall.com/lists/oss-security/2009/04/01/4  View
423531 38678 CVE-2009-1243 MISC:http://vigilance.fr/vulnerability/Linux-kernel-denial-of-service-via-proc-net-udp-8586  View
423532 38678 CVE-2009-1243 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=30842f2989aacfaba3ccb39829b3417be9313dbe  View
423533 38678 CVE-2009-1243 CONFIRM:http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.29.1  View
423534 38678 CVE-2009-1243 BID:34329  View
423535 38678 CVE-2009-1243 URL:http://www.securityfocus.com/bid/34329  View
423536 38678 CVE-2009-1243 SECUNIA:34478  View
423537 38678 CVE-2009-1243 URL:http://secunia.com/advisories/34478  View
423538 38678 CVE-2009-1243 VUPEN:ADV-2009-0924  View
423539 38678 CVE-2009-1243 URL:http://www.vupen.com/english/advisories/2009/0924  View
423540 38678 CVE-2009-1243 XF:linux-kernel-procnetudp-dos(49595)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
42315 JVNDB-2009-003322 Acute Control Panel における SQL インジェクションの脆弱性 Acute Control Panel には、SQL インジェクションの脆弱性が存在します。 CVE-2009-1247 38678 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003322.html  View