NVD

Id
48356  
Name
CVE-2009-1046  
Description
The console selection feature in the Linux kernel 2.6.28 before 2.6.28.4, 2.6.25, and possibly earlier versions, when the UTF-8 console is used, allows physically proximate attackers to cause a denial of service (memory corruption) by selecting a small number of 3-byte UTF-8 characters, which triggers an "off-by-two memory error." NOTE: it is not clear whether this issue crosses privilege boundaries.  
Reject
 
CVSS Version
2  
CVSS Score
4.7  
Severity
Medium  
CVSS Base Score
4.7  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-07  
Published
2009-03-23  
Modified Date
2016-05-31  
Seq
2009-1046  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
243165 48356 CVE-2009-1046 [linux-kernel] 20090130 [PATCH] Fix memory corruption in console selection  View
243166 48356 CVE-2009-1046 [linux-kernel] 20090202 Re: [PATCH] Fix memory corruption in console selection  View
243167 48356 CVE-2009-1046 DSA-1787  View
243168 48356 CVE-2009-1046 DSA-1800  View
243169 48356 CVE-2009-1046 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.4  View
243170 48356 CVE-2009-1046 [oss-security] 20090212 Re: http://www.securityfocus.com/bid/33672/info kernel  View
243171 48356 CVE-2009-1046 [oss-security] 20090212 Re: http://www.securityfocus.com/bid/33672/info kernel issue  View
243172 48356 CVE-2009-1046 [oss-security] 20090212 http://www.securityfocus.com/bid/33672/info kernel issue  View
243173 48356 CVE-2009-1046 RHSA-2009:0451  View
243174 48356 CVE-2009-1046 33672  View
243175 48356 CVE-2009-1046 USN-751-1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40140 JVNDB-2009-001146 Linux kernel のコンソール選択機能におけるサービス運用妨害 (DoS) の脆弱性 Linux kernel のコンソール選択機能には、UTF-8 コンソールを使用している場合、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2009-1046 38477 CVE-2009-1046 48356 4.7 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001146.html 2009-03-23 2009-04-16 View